Apv

Fetches the attack path graph for a run.

get/v1/apv/simulations/{simulationUuid}/runs/{runUuid}/attack-path

Request

Path parameters

simulationUuidstring required

Simulation UUID

runUuidstring required

Run UUID

Response

AttackPathResponseSwagger

Example response

{
  "attack_paths": [
    {
      "actions": [
        {
          "action_group_name": "Mimikatz Credential Dump",
          "action_type": "Credential",
          "description": "Dumped credentials from LSASS",
          "severity": "High",
          "time": 1751360400000,
          "user_name": "corp\\svc-backup",
          "user_type": "ad_user"
        }
      ],
      "implant": {
        "host_name": "WIN-AGENT-01",
        "integrity": "medium",
        "type": "Workstation"
      }
    }
  ],
  "description": {
    "initial_access_point": "WIN-AGENT-01",
    "initiator": {
      "id": 101,
      "name": "WIN-AGENT-01",
      "type": "LINUX_AGENT"
    },
    "name": "Q3 Gray-Box Simulation",
    "status": "COMPLETED"
  }
}

Changes