{
  "opencollection": "1.0.0",
  "info": {
    "name": "Malwarebytes Exclusions API",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "Exclusions",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Get exclusion by id",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/exclusions/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "populate_risk",
                "value": "",
                "type": "query",
                "description": "Populate risk fields on exclusion"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get exclusion by id."
        },
        {
          "info": {
            "name": "Update exclusion",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/exclusions/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Use this API endpoint to update exclusions.\n\n## Validation rules\n\n- etag is required\n- type must be a number from the following list: 1, 2, 3, 4, 5, 6, 7, 8, 13\n- exploit_protection can only be true if type is 13\n- ransomware_protection can only be true if type is 1 or 2\n- malware_protection can only be true if type is 1, 2, 4, or 5\n- website_protection can only be true if type is 6, 7, or 8\n- bruteforce_protection can only be true if type is 7\n- if type is 14, only suspicious_activity can and m"
        },
        {
          "info": {
            "name": "Delete exclusion by id",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/exclusions/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete exclusion by id."
        },
        {
          "info": {
            "name": "Get exclusions",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/exclusions",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              },
              {
                "name": "search_string",
                "value": "",
                "type": "query",
                "description": "Search with exclusion string."
              },
              {
                "name": "policy_ids",
                "value": "",
                "type": "query",
                "description": "Search with exclusion policy ids."
              },
              {
                "name": "type",
                "value": "",
                "type": "query",
                "description": "Search with exclusion type"
              },
              {
                "name": "since",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter since exclusion times."
              },
              {
                "name": "until",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter until exclusion times."
              },
              {
                "name": "sort_by",
                "value": "",
                "type": "query",
                "description": "Field to sort results with. 'risk' is resolved in-memory by Retina (risk is not persisted)."
              },
              {
                "name": "sort_order",
                "value": "",
                "type": "query",
                "description": "Sorting direction"
              },
              {
                "name": "populate_risk",
                "value": "",
                "type": "query",
                "description": "Populate risk fields on exclusions"
              },
              {
                "name": "risk",
                "value": "",
                "type": "query",
                "description": "Filter exclusions by risk level (validated by Retina)"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get exclusions."
        },
        {
          "info": {
            "name": "Create exclusion",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/exclusions",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Use this API endpoint to add exclusions.\n\n## Validation rules\n\n- type must be a number from the following list: 1, 2, 3, 4, 5, 6, 7, 8, 13\n- exploit_protection can only be true if type is 13\n- ransomware_protection can only be true if type is 1 or 2\n- malware_protection can only be true if type is 1, 2, 4, or 5\n- website_protection can only be true if type is 6, 7, or 8\n- bruteforce_protection can only be true if type is 7\n- if type is 14, only suspicious_activity can and must be true\n- if accou"
        },
        {
          "info": {
            "name": "Delete exclusions in bulk",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/exclusions",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete exclusions in bulk."
        },
        {
          "info": {
            "name": "Evaluate exclusions risk",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/exclusions/evaluates",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Evaluate exclusions risk."
        },
        {
          "info": {
            "name": "Get exclusions risk statistics",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/exclusions/risk-stats",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get exclusions risk statistics."
        },
        {
          "info": {
            "name": "Get all exclusions",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/exclusions",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get all exclusions"
        },
        {
          "info": {
            "name": "Create exclusion",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/exclusions",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Use this API endpoint to add exclusions.\n\n## Validation rules\n\n- type must be a number from the following list: 1, 2, 3, 4, 5, 6, 7, 8, 13, 14\n- exploit_protection can only be true if type is 13\n- ransomware_protection can only be true if type is 1 or 2\n- malware_protection can only be true if type is 1, 2, 4, or 5\n- website_protection can only be true if type is 6, 7, or 8\n- bruteforce_protection can only be true if type is 7\n- if type is 14, only suspicious_activity can and must be true\n- if a"
        },
        {
          "info": {
            "name": "Get one exclusions",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/exclusions/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get details of an exclusion by the exclusion ID"
        },
        {
          "info": {
            "name": "Update one exclusions",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/exclusions/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Update an exclusion by the exclusion ID"
        },
        {
          "info": {
            "name": "Delete exclusion",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/exclusions/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete exclusion by the exclusion ID."
        }
      ]
    }
  ],
  "bundled": true
}