GET /service/api/console/gsm/{gsmKey}/sites/{siteId}/endpoints/{endpointId}/threathistory
?startDate={startDate}
&endDate={endDate}
&returnedInfo={returnedInfo}
&pageSize={pageSize}
&pageNr={pageNr}

Gets threat history information for a given endpoint.

NOTE: The maximum allowed time difference between 'startDate' and 'endDate' is 3 calendar months.

Request Information

URI Parameters

Name	Description	Type	Additional Information
gsmKey	The GSM console keycode.	string	Required
siteId	The site identifier.	string	Required
endpointId	The endpoint identifier.	string	Required
startDate	If specified, returns all threat history records after (or at) the given date. If omitted, defaults to 'endDate' minus 24 hours.	date	None.
endDate	If specified, returns all threat history records before (or at) the given date. If omitted, defaults to the current date and time.	date	None.
returnedInfo	A comma separated list of classes of information to be provided in response data. Currently only the "ExtendedInfo" class is supported as a value. If omitted, general threat record information is returned only.	string	None.
pageSize	Specifies the number of records to return.	integer	Default value is 50
pageNr	Specifies the page number. Can be used to retrieve the next batch of records.	integer	Default value is 1

URI Sample(s)


GET	https://unityapi.webrootcloudav.com/service/api/console/gsm/3515-3EC8-3018-4DAB-A776/sites/3c5b599c-f244-4c7e-a78b-b3e9f252fac8/endpoints/1ffe613e-b23c-4eb8-82c7-623502a83e6b/threathistory
GET	https://unityapi.webrootcloudav.com/service/api/console/gsm/3515-3EC8-3018-4DAB-A776/sites/3c5b599c-f244-4c7e-a78b-b3e9f252fac8/endpoints/1ffe613e-b23c-4eb8-82c7-623502a83e6b/threathistory?returnedInfo=ExtendedInfo
GET	https://unityapi.webrootcloudav.com/service/api/console/gsm/3515-3EC8-3018-4DAB-A776/sites/3c5b599c-f244-4c7e-a78b-b3e9f252fac8/endpoints/1ffe613e-b23c-4eb8-82c7-623502a83e6b/threathistory?startDate=2018-09-01&endDate=2018-09-30&pageSize=100&pageNr=3

Body Parameters

None.

Response Information

Resource Description

Information about matching threat history records.

GetThreatHistoryResponseModel

Name	Description	Type	Additional Information
MoreAvailable	Value indicating whether more records are available in the queried time window. Increment the page number in the query to obtain additional threat history records.	boolean	None.
PageNr	The number of the page that was requested.	integer	None.
PageSize	The size of the page that was requested.	integer	None.
StartDate	Start date for returned records. Threat history entries after (or at) this date are contained in the response.	date	None.
EndDate	End date for returned records. Threat history entries before (or at) this date are contained in the response.	date	None.
ThreatRecords	List of threat history records.	Collection of GetThreatHistoryResponseModel_Record	None.

Sample Response

{
  "MoreAvailable": false,
  "PageNr": 1,
  "PageSize": 50,
  "StartDate": "2025-11-08T17:04:48.9062123Z",
  "EndDate": "2026-02-08T17:04:48.9062123Z",
  "ThreatRecords": [
    {
      "EndpointId": "4664f37e-2a8f-45a7-a505-16564b0a49f4",
      "MachineId": "9733ABD6F10E42BF8E7E5D5AD331B740:::767F095FF0E64A518BCE997D414BE80E:::767F095FF0E64A518BCE997D414BE80E",
      "HostName": "MyComputer1",
      "FileName": "eicar.com",
      "PathName": "?:\\users\\user1\\desktop",
      "MalwareGroup": "Anti-Malware Testfile",
      "FirstSeen": "2026-01-26T17:04:48.9062123Z",
      "LastSeen": "2026-02-06T17:04:48.9062123Z",
      "ExtendedInfo": {
        "DwellTime": 307,
        "FileMD5": "2D92D91AF888427F8330B05E238F1049",
        "FileSize": 68,
        "UserName": "User1",
        "IPAddress": "95.9.152.85",
        "Determination": "B",
        "FileVendor": "",
        "FileProduct": "",
        "FileVersion": ""
      }
    },
    {
      "EndpointId": "bea3cfa1-f66c-4fb3-84f3-8663e1db4999",
      "MachineId": "596BBA8BFBE24BBE9CD01EF12D554589:::7B343BEBC0C047F7A2C9901DD44AA1D9:::7B343BEBC0C047F7A2C9901DD44AA1D9",
      "HostName": "MyComputer2",
      "FileName": "eicar.com",
      "PathName": "?:\\users\\user2\\desktop",
      "MalwareGroup": "Anti-Malware Testfile",
      "FirstSeen": "2026-01-26T17:04:48.9062123Z",
      "LastSeen": "2026-02-06T17:04:48.9062123Z",
      "ExtendedInfo": {
        "DwellTime": 134,
        "FileMD5": "5F33C6FDC80545A2944247368EE02CDF",
        "FileSize": 68,
        "UserName": "User2",
        "IPAddress": "95.70.66.227",
        "Determination": "B",
        "FileVendor": "",
        "FileProduct": "",
        "FileVersion": ""
      }
    }
  ]
}

<GetThreatHistoryResponseModel xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/Webroot.UnityAPI.ServiceExtension.Console.Models">
  <EndDate>2026-02-08T17:04:48.9062123Z</EndDate>
  <MoreAvailable>false</MoreAvailable>
  <PageNr>1</PageNr>
  <PageSize>50</PageSize>
  <StartDate>2025-11-08T17:04:48.9062123Z</StartDate>
  <ThreatRecords>
    <GetThreatHistoryResponseModel_Record>
      <EndpointId>4664f37e-2a8f-45a7-a505-16564b0a49f4</EndpointId>
      <ExtendedInfo>
        <Determination>B</Determination>
        <DwellTime>307</DwellTime>
        <FileMD5>2D92D91AF888427F8330B05E238F1049</FileMD5>
        <FileProduct></FileProduct>
        <FileSize>68</FileSize>
        <FileVendor></FileVendor>
        <FileVersion></FileVersion>
        <IPAddress>95.9.152.85</IPAddress>
        <UserName>User1</UserName>
      </ExtendedInfo>
      <FileName>eicar.com</FileName>
      <FirstSeen>2026-01-26T17:04:48.9062123Z</FirstSeen>
      <HostName>MyComputer1</HostName>
      <LastSeen>2026-02-06T17:04:48.9062123Z</LastSeen>
      <MachineId>9733ABD6F10E42BF8E7E5D5AD331B740:::767F095FF0E64A518BCE997D414BE80E:::767F095FF0E64A518BCE997D414BE80E</MachineId>
      <MalwareGroup>Anti-Malware Testfile</MalwareGroup>
      <PathName>?:\users\user1\desktop</PathName>
    </GetThreatHistoryResponseModel_Record>
    <GetThreatHistoryResponseModel_Record>
      <EndpointId>bea3cfa1-f66c-4fb3-84f3-8663e1db4999</EndpointId>
      <ExtendedInfo>
        <Determination>B</Determination>
        <DwellTime>134</DwellTime>
        <FileMD5>5F33C6FDC80545A2944247368EE02CDF</FileMD5>
        <FileProduct></FileProduct>
        <FileSize>68</FileSize>
        <FileVendor></FileVendor>
        <FileVersion></FileVersion>
        <IPAddress>95.70.66.227</IPAddress>
        <UserName>User2</UserName>
      </ExtendedInfo>
      <FileName>eicar.com</FileName>
      <FirstSeen>2026-01-26T17:04:48.9062123Z</FirstSeen>
      <HostName>MyComputer2</HostName>
      <LastSeen>2026-02-06T17:04:48.9062123Z</LastSeen>
      <MachineId>596BBA8BFBE24BBE9CD01EF12D554589:::7B343BEBC0C047F7A2C9901DD44AA1D9:::7B343BEBC0C047F7A2C9901DD44AA1D9</MachineId>
      <MalwareGroup>Anti-Malware Testfile</MalwareGroup>
      <PathName>?:\users\user2\desktop</PathName>
    </GetThreatHistoryResponseModel_Record>
  </ThreatRecords>
</GetThreatHistoryResponseModel>

GET /service/api/console/gsm/{gsmKey}/sites/{siteId}/endpoints/{endpointId}/threathistory ?startDate={startDate} &endDate={endDate} &returnedInfo={returnedInfo} &pageSize={pageSize} &pageNr={pageNr}