GET /service/api/console/gsm/{gsmKey}/sites/{siteId}/endpoints/{endpointId}/threathistory
?startDate={startDate}
&endDate={endDate}
&returnedInfo={returnedInfo}
&pageSize={pageSize}
&pageNr={pageNr}
Gets threat history information for a given endpoint.
Request Information
URI Parameters
| Name | Description | Type | Additional Information |
|---|---|---|---|
| gsmKey |
The GSM console keycode. |
string |
Required |
| siteId |
The site identifier. |
string |
Required |
| endpointId |
The endpoint identifier. |
string |
Required |
| startDate |
If specified, returns all threat history records after (or at) the given date. If omitted, defaults to 'endDate' minus 24 hours. |
date |
None. |
| endDate |
If specified, returns all threat history records before (or at) the given date. If omitted, defaults to the current date and time. |
date |
None. |
| returnedInfo |
A comma separated list of classes of information to be provided in response data. Currently only the "ExtendedInfo" class is supported as a value. If omitted, general threat record information is returned only. |
string |
None. |
| pageSize |
Specifies the number of records to return. |
integer |
Default value is 50 |
| pageNr |
Specifies the page number. Can be used to retrieve the next batch of records. |
integer |
Default value is 1 |
URI Sample(s)
|
GET
|
https://unityapi.webrootcloudav.com/service/api/console/gsm/3515-3EC8-3018-4DAB-A776/sites/3c5b599c-f244-4c7e-a78b-b3e9f252fac8/endpoints/1ffe613e-b23c-4eb8-82c7-623502a83e6b/threathistory
|
|
GET
|
https://unityapi.webrootcloudav.com/service/api/console/gsm/3515-3EC8-3018-4DAB-A776/sites/3c5b599c-f244-4c7e-a78b-b3e9f252fac8/endpoints/1ffe613e-b23c-4eb8-82c7-623502a83e6b/threathistory?returnedInfo=ExtendedInfo
|
|
GET
|
https://unityapi.webrootcloudav.com/service/api/console/gsm/3515-3EC8-3018-4DAB-A776/sites/3c5b599c-f244-4c7e-a78b-b3e9f252fac8/endpoints/1ffe613e-b23c-4eb8-82c7-623502a83e6b/threathistory?startDate=2018-09-01&endDate=2018-09-30&pageSize=100&pageNr=3
|
Body Parameters
None.
Response Information
Resource Description
Information about matching threat history records.
GetThreatHistoryResponseModel| Name | Description | Type | Additional Information |
|---|---|---|---|
| MoreAvailable |
Value indicating whether more records are available in the queried time window. Increment the page number in the query to obtain additional threat history records. |
boolean |
None. |
| PageNr |
The number of the page that was requested. |
integer |
None. |
| PageSize |
The size of the page that was requested. |
integer |
None. |
| StartDate |
Start date for returned records. Threat history entries after (or at) this date are contained in the response. |
date |
None. |
| EndDate |
End date for returned records. Threat history entries before (or at) this date are contained in the response. |
date |
None. |
| ThreatRecords |
List of threat history records. |
Collection of GetThreatHistoryResponseModel_Record |
None. |
Sample Response
{
"MoreAvailable": false,
"PageNr": 1,
"PageSize": 50,
"StartDate": "2022-11-09T06:02:13.5994233Z",
"EndDate": "2023-02-09T06:02:13.5994233Z",
"ThreatRecords": [
{
"EndpointId": "0f38ec60-7f20-4b85-8b20-4dae7c674340",
"MachineId": "DD735E6A2920440187D1909DA25C047A:::C6627A7D74DF427AAA7D5CBFFAA8647C:::C6627A7D74DF427AAA7D5CBFFAA8647C",
"HostName": "MyComputer1",
"FileName": "eicar.com",
"PathName": "?:\\users\\user1\\desktop",
"MalwareGroup": "Anti-Malware Testfile",
"FirstSeen": "2023-01-27T06:02:13.5994233Z",
"LastSeen": "2023-02-07T06:02:13.5994233Z",
"ExtendedInfo": {
"DwellTime": 479,
"FileMD5": "4D78B0AE4F714C65A4A0A44CB9BDDF6F",
"FileSize": 68,
"UserName": "User1",
"IPAddress": "95.187.235.172",
"Determination": "B",
"FileVendor": "",
"FileProduct": "",
"FileVersion": ""
}
},
{
"EndpointId": "94f83d80-f784-4433-b058-a35764e1b34e",
"MachineId": "4368DB959E424967A86495F89CE5099D:::4F0B8FA7618F462CA8E72A8746C7F4BA:::4F0B8FA7618F462CA8E72A8746C7F4BA",
"HostName": "MyComputer2",
"FileName": "eicar.com",
"PathName": "?:\\users\\user2\\desktop",
"MalwareGroup": "Anti-Malware Testfile",
"FirstSeen": "2023-01-27T06:02:13.5994233Z",
"LastSeen": "2023-02-07T06:02:13.5994233Z",
"ExtendedInfo": {
"DwellTime": 315,
"FileMD5": "3EF0AAAFF8454FA0AA10D9D865481577",
"FileSize": 68,
"UserName": "User2",
"IPAddress": "95.153.100.164",
"Determination": "B",
"FileVendor": "",
"FileProduct": "",
"FileVersion": ""
}
}
]
}
<GetThreatHistoryResponseModel xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/Webroot.UnityAPI.ServiceExtension.Console.Models">
<EndDate>2023-02-09T06:02:13.5994233Z</EndDate>
<MoreAvailable>false</MoreAvailable>
<PageNr>1</PageNr>
<PageSize>50</PageSize>
<StartDate>2022-11-09T06:02:13.5994233Z</StartDate>
<ThreatRecords>
<GetThreatHistoryResponseModel_Record>
<EndpointId>0f38ec60-7f20-4b85-8b20-4dae7c674340</EndpointId>
<ExtendedInfo>
<Determination>B</Determination>
<DwellTime>479</DwellTime>
<FileMD5>4D78B0AE4F714C65A4A0A44CB9BDDF6F</FileMD5>
<FileProduct></FileProduct>
<FileSize>68</FileSize>
<FileVendor></FileVendor>
<FileVersion></FileVersion>
<IPAddress>95.187.235.172</IPAddress>
<UserName>User1</UserName>
</ExtendedInfo>
<FileName>eicar.com</FileName>
<FirstSeen>2023-01-27T06:02:13.5994233Z</FirstSeen>
<HostName>MyComputer1</HostName>
<LastSeen>2023-02-07T06:02:13.5994233Z</LastSeen>
<MachineId>DD735E6A2920440187D1909DA25C047A:::C6627A7D74DF427AAA7D5CBFFAA8647C:::C6627A7D74DF427AAA7D5CBFFAA8647C</MachineId>
<MalwareGroup>Anti-Malware Testfile</MalwareGroup>
<PathName>?:\users\user1\desktop</PathName>
</GetThreatHistoryResponseModel_Record>
<GetThreatHistoryResponseModel_Record>
<EndpointId>94f83d80-f784-4433-b058-a35764e1b34e</EndpointId>
<ExtendedInfo>
<Determination>B</Determination>
<DwellTime>315</DwellTime>
<FileMD5>3EF0AAAFF8454FA0AA10D9D865481577</FileMD5>
<FileProduct></FileProduct>
<FileSize>68</FileSize>
<FileVendor></FileVendor>
<FileVersion></FileVersion>
<IPAddress>95.153.100.164</IPAddress>
<UserName>User2</UserName>
</ExtendedInfo>
<FileName>eicar.com</FileName>
<FirstSeen>2023-01-27T06:02:13.5994233Z</FirstSeen>
<HostName>MyComputer2</HostName>
<LastSeen>2023-02-07T06:02:13.5994233Z</LastSeen>
<MachineId>4368DB959E424967A86495F89CE5099D:::4F0B8FA7618F462CA8E72A8746C7F4BA:::4F0B8FA7618F462CA8E72A8746C7F4BA</MachineId>
<MalwareGroup>Anti-Malware Testfile</MalwareGroup>
<PathName>?:\users\user2\desktop</PathName>
</GetThreatHistoryResponseModel_Record>
</ThreatRecords>
</GetThreatHistoryResponseModel>