{
  "opencollection": "1.0.0",
  "info": {
    "name": "Malwarebytes Groups API",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "Groups",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Get group by id",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/groups/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get group by id."
        },
        {
          "info": {
            "name": "Update group",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/groups/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Update group."
        },
        {
          "info": {
            "name": "Delete group by id",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/groups/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete group by id."
        },
        {
          "info": {
            "name": "Get all groups",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/groups",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "name",
                "value": "",
                "type": "query",
                "description": "Filter by group name"
              },
              {
                "name": "parent_id",
                "value": "",
                "type": "query",
                "description": "For filtering by parent group ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "filter_by_parent_id",
                "value": "",
                "type": "query",
                "description": "Set this to 'true' when parent_id has been set."
              },
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get all groups in an account."
        },
        {
          "info": {
            "name": "Create group",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/groups",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Create group."
        },
        {
          "info": {
            "name": "Assign endpoints to a group",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/groups/:id/machines",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Use this endpoint to move machines in a group.\nThis API endpoint allows you to specify queries instead of explicitly specifying endpoint ids. See example for more details.\n\nTo assign all your `Mac Os` to a group, and on all your endpoints for a certain account with policy matching the string `serious policy`, use the following body:\n\n```json\n    \"queries\": [{\n        \"os_info.os_platform\": \"Mac Os\"\n    }, {\n        \"policy_name\": \"serious policy\"    \n    }]\n```\nThe constraints accepted are the s"
        },
        {
          "info": {
            "name": "Get group by id",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/groups/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get group by the Group id."
        },
        {
          "info": {
            "name": "Update group",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/groups/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Update group."
        },
        {
          "info": {
            "name": "Delete group by its id",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/groups/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete group by the Group id."
        },
        {
          "info": {
            "name": "Get all groups",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/groups",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "name",
                "value": "",
                "type": "query",
                "description": "Filter by group name"
              },
              {
                "name": "parent_id",
                "value": "",
                "type": "query",
                "description": "For filtering by parent group ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "filter_by_parent_id",
                "value": "",
                "type": "query",
                "description": "Set this to 'true' when parent_id has been set."
              },
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get all groups in an account."
        },
        {
          "info": {
            "name": "Create group",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/groups",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Create group."
        },
        {
          "info": {
            "name": "Filter groups across accounts",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/groups",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Filter groups across accounts"
        },
        {
          "info": {
            "name": "Assign endpoints to a group across accounts",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/groups/:id/machines",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Use this endpoint to move machines in a group.\nThis API endpoint allows you to specify queries instead of explicitly specifying endpoint ids. See example for more details.\n\nTo assign all your `Mac Os` endpoints across two of your manages sites to a group, and on all your endpoints for a certain account with policy matching the string `serious policy`, use the following body:\n\n```json\n    \"groups\": [{ \n        \"account_ids\": [\"<account_id_a>\", \"<account_id_b>\"],\n        \"os_info.os_platform\": \"Ma"
        }
      ]
    }
  ],
  "bundled": true
}