{
  "opencollection": "1.0.0",
  "info": {
    "name": "Datadog Account Security API",
    "version": "1.0"
  },
  "request": {
    "auth": {
      "type": "apikey",
      "key": "DD-API-KEY",
      "value": "{{DD-API-KEY}}",
      "placement": "header"
    }
  },
  "items": [
    {
      "info": {
        "name": "Security",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Datadog Get All Security Filters",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/configuration/security_filters",
            "auth": {
              "type": "apikey",
              "key": "DD-API-KEY",
              "value": "{{DD-API-KEY}}",
              "placement": "header"
            }
          },
          "docs": "Get the list of configured security filters with their definitions."
        },
        {
          "info": {
            "name": "Datadog Create a Security Filter",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/configuration/security_filters",
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "DD-API-KEY",
              "value": "{{DD-API-KEY}}",
              "placement": "header"
            }
          },
          "docs": "Create a security filter.\n\nSee the [security filter guide](https://docs.datadoghq.com/security_platform/guide/how-to-setup-security-filters-using-security-monitoring-api/)\nfor more examples."
        },
        {
          "info": {
            "name": "Datadog Get a Security Filter",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/configuration/security_filters/:security_filter_id",
            "params": [
              {
                "name": "security_filter_id",
                "value": "",
                "type": "path",
                "description": "The ID of the security filter."
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "DD-API-KEY",
              "value": "{{DD-API-KEY}}",
              "placement": "header"
            }
          },
          "docs": "Get the details of a specific security filter.\n\nSee the [security filter guide](https://docs.datadoghq.com/security_platform/guide/how-to-setup-security-filters-using-security-monitoring-api/)\nfor more examples."
        },
        {
          "info": {
            "name": "Datadog Update a Security Filter",
            "type": "http"
          },
          "http": {
            "method": "PATCH",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/configuration/security_filters/:security_filter_id",
            "params": [
              {
                "name": "security_filter_id",
                "value": "",
                "type": "path",
                "description": "The ID of the security filter."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "DD-API-KEY",
              "value": "{{DD-API-KEY}}",
              "placement": "header"
            }
          },
          "docs": "Update a specific security filter.\nReturns the security filter object when the request is successful."
        },
        {
          "info": {
            "name": "Datadog Delete a Security Filter",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/configuration/security_filters/:security_filter_id",
            "params": [
              {
                "name": "security_filter_id",
                "value": "",
                "type": "path",
                "description": "The ID of the security filter."
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "DD-API-KEY",
              "value": "{{DD-API-KEY}}",
              "placement": "header"
            }
          },
          "docs": "Delete a specific security filter."
        },
        {
          "info": {
            "name": "Datadog Get a Quick List of Security Signals",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/signals",
            "params": [
              {
                "name": "filter[query]",
                "value": "security:attack status:high",
                "type": "query",
                "description": "The search query for security signals."
              },
              {
                "name": "filter[from]",
                "value": "2019-01-02T09:42:36.320Z",
                "type": "query",
                "description": "The minimum timestamp for requested security signals."
              },
              {
                "name": "filter[to]",
                "value": "2019-01-03T09:42:36.320Z",
                "type": "query",
                "description": "The maximum timestamp for requested security signals."
              },
              {
                "name": "sort",
                "value": "example_value",
                "type": "query",
                "description": "The order of the security signals in results."
              },
              {
                "name": "page[cursor]",
                "value": "eyJzdGFydEF0IjoiQVFBQUFYS2tMS3pPbm40NGV3QUFBQUJCV0V0clRFdDZVbG8zY3pCRmNsbHJiVmxDWlEifQ==",
                "type": "query",
                "description": "A list of results using the cursor provided in the previous query."
              },
              {
                "name": "page[limit]",
                "value": "25",
                "type": "query",
                "description": "The maximum number of security signals in the response."
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "DD-API-KEY",
              "value": "{{DD-API-KEY}}",
              "placement": "header"
            }
          },
          "docs": "The list endpoint returns security signals that match a search query.\nBoth this endpoint and the POST endpoint can be used interchangeably when listing\nsecurity signals."
        },
        {
          "info": {
            "name": "Datadog Get a List of Security Signals",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/signals/search",
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "DD-API-KEY",
              "value": "{{DD-API-KEY}}",
              "placement": "header"
            }
          },
          "docs": "Returns security signals that match a search query.\nBoth this endpoint and the GET endpoint can be used interchangeably for listing\nsecurity signals."
        },
        {
          "info": {
            "name": "Datadog Modify the Triage Assignee of a Security Signal",
            "type": "http"
          },
          "http": {
            "method": "PATCH",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/signals/:signal_id/assignee",
            "params": [
              {
                "name": "signal_id",
                "value": "",
                "type": "path",
                "description": "The ID of the signal."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Modify the triage assignee of a security signal."
        },
        {
          "info": {
            "name": "Datadog Change the Related Incidents of a Security Signal",
            "type": "http"
          },
          "http": {
            "method": "PATCH",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/signals/:signal_id/incidents",
            "params": [
              {
                "name": "signal_id",
                "value": "",
                "type": "path",
                "description": "The ID of the signal."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Change the related incidents for a security signal."
        },
        {
          "info": {
            "name": "Datadog Change the Triage State of a Security Signal",
            "type": "http"
          },
          "http": {
            "method": "PATCH",
            "url": "https://{subdomain}.{site}/api/v2/security_monitoring/signals/:signal_id/state",
            "params": [
              {
                "name": "signal_id",
                "value": "",
                "type": "path",
                "description": "The ID of the signal."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Change the triage state of a security signal."
        },
        {
          "info": {
            "name": "Datadog Get Hourly Usage for Application Security",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://{subdomain}.{site}/api/v2/usage/application_security",
            "params": [
              {
                "name": "start_hr",
                "value": "example_value",
                "type": "query",
                "description": "Datetime in ISO-8601 format, UTC, precise to hour: `[YYYY-MM-DDThh]` for usage beginning at this hour."
              },
              {
                "name": "end_hr",
                "value": "example_value",
                "type": "query",
                "description": "Datetime in ISO-8601 format, UTC, precise to hour: `[YYYY-MM-DDThh]` for usage ending\n**before** this hour."
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "DD-API-KEY",
              "value": "{{DD-API-KEY}}",
              "placement": "header"
            }
          },
          "docs": "Get hourly usage for application security .\n**Note:** This endpoint has been deprecated. Hourly usage data for all products is now available in the [Get hourly usage by product family API](https://docs.datadoghq.com/api/latest/usage-metering/#get-hourly-usage-by-product-family)"
        }
      ]
    }
  ],
  "bundled": true
}