ADadaptivesecurity
Email Security

Undo a security event's remediation

Changed on

Restore every recipient's copy of a security event's message to where it was before it was moved to trash, spam, or quarantine. The event must be resolved with its message in trash, spam, or quarantine, its latest remediation must not have failed, and its source must be connected with read-write scopes. The undo runs asynchronously: the response reports REMEDIATING, and the event returns to NEEDS_REVIEW once every recipient's copy has been restored.

Required permission: email_security:write

post/v2/email-security/security-events/{eventId}/undo-remediation

Request

  • Base URL
    https://api.adaptivesecurity.com
  • URL
    https://api.adaptivesecurity.com/v2/email-security/security-events/{eventId}/undo-remediation
  • Auth
    HTTP bearer

Path parameters

eventIdstring uuid required

Security event ID

Response

Undo started

idstring uuid

The security event being restored

status'NEEDS_REVIEW' | 'REMEDIATING' | 'RESOLVED'

Review state after the request. The undo runs asynchronously; poll the security event until it is NEEDS_REVIEW

Example response

{
  "id": "a8f2947c-3aef-4f5a-981f-08be76fde32f",
  "status": "REMEDIATING"
}

Changes