Sign in
Attack Paths
Enterprise

List attack path findings

Returns a unified, paginated list of attack path findings. Defaults to active findings of both relationship and list types unless filtered otherwise.

get/api/v2/attack-paths/findings

Query parameters

sort_bystring

Sort by column. Can be used multiple times; prepend a hyphen for descending order. See parameter description for details about which columns are sortable.

Sortable columns are severity, finding_type, finding, title, platform, environment_id, environment_name, asset_group_tag_id, zone_name, source_principal_id, source_principal_kind, source_principal_name, target_principal_id, target_principal_kind, target_principal_name, status, id, first_seen, last_seen.

severitystring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by severity level.

finding_typestring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by finding type. When not provided, both types are returned.

findingstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by finding name.

titlestring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by human-readable finding title.

platformstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by platform.

environment_idstring[]

Filter by one or more environment identifiers. Repeat the parameter to include multiple environments — results are the union of all specified values.

environment_namestring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by environment display name.

asset_group_tag_idstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by asset group tag identifier.

zone_namestring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by zone name (e.g. "Tier Zero").

source_principal_idstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by source principal identifier.

source_principal_kindstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by source principal kind.

source_principal_namestring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by source principal display name.

target_principal_idstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by target principal identifier.

target_principal_kindstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by target principal kind.

target_principal_namestring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by target principal display name.

statusstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by finding status.

first_seenstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by first seen timestamp.

last_seenstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

Filter by last seen timestamp.

is_cross_platformstring

Filter results by column boolean value. Valid filter predicates are eq, neq.

Filter findings by whether source and target principals belong to different platforms.

skipinteger

The number of items to skip in a paginated response.

This query parameter is used for determining the number of objects to skip in pagination.

limitinteger

The limit of results requested by the client.

This query parameter is used for setting an upper limit of objects returned in paginated responses.

Response

OK

countinteger

The total number of results.

skipinteger

The number of items to skip in a paginated response.

limitinteger

The limit of results requested by the client.

Changes

Changed in 5 of the 66 revisions of this API.136

  • 6d4b33f1714e2See the full diff
    • ○

      added the new optional query request parameter is_cross_platform

      new-optional-request-parameter

    • ○

      added the optional property allOf[subschema #2]/data/items/is_cross_platform to the response with the 200 status (media type: application/json)

      response-optional-property-added

  • 001a4a958c691See the full diff
    • ○

      added the optional property allOf[subschema #2]/data/items/id to the response with the 200 status

      response-optional-property-added

  • 2f2389a8ef401See the full diff
    • ●

      added the new orphaned enum value to the allOf[subschema #2]/data/items/status response property for the response status 200

      response-property-enum-value-added

  • 5a30cd410a67122See the full diff
    • ▲

      added the pattern ^((eq|~eq|neq):)?[^:]+$ to the query request parameter asset_group_tag_id

      request-parameter-pattern-added

    • ●

      deleted the query request parameter zone_id

      request-parameter-removed

    • ●

      removed the optional property allOf[subschema #2]/data/items/zone_id from the response with the 200 status (media type: application/json)

      response-optional-property-removed

    • ○

      for the query request parameter asset_group_tag_id, the type/format was generalized from array/ to string/

      request-parameter-type-generalized

    • ○

      added the optional property allOf[subschema #2]/data/items/asset_group_tag_id to the response with the 200 status (media type: application/json)

      response-optional-property-added

  • bd9ad5013a5b1See the full diff
    • ○

      endpoint added

      endpoint-added