{
  "opencollection": "1.0.0",
  "info": {
    "name": "Malwarebytes Quarantine API",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "Quarantine",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Export quarantines",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/quarantine/export",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              },
              {
                "name": "name",
                "value": "",
                "type": "query",
                "description": "Search with quarantine threat name."
              },
              {
                "name": "category",
                "value": "",
                "type": "query",
                "description": "Search with quarantine category."
              },
              {
                "name": "type",
                "value": "",
                "type": "query",
                "description": "Search with quarantine type"
              },
              {
                "name": "since",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter since quarantine scan times."
              },
              {
                "name": "until",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter until quarantine scan times."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Export quarantine data. Specify your interested fields and the output format.\n\n\n\nSupported output formats: csv, xlsx, json.\n\n\n\n## Settings\n\n\n\n| Name | Description |\n|------|-------------|\n|ids | List of quarantine ids selected for exporting |\n| groups | List of queries. The constraints accepted can be found on the route schema |\n| download | If set to true, the server will set the `Content-Disposition` header using the `filename` and `format` |\n| select | Which fields to select, and which field "
        },
        {
          "info": {
            "name": "Get all quarantined items",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/quarantine",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              },
              {
                "name": "name",
                "value": "",
                "type": "query",
                "description": "Search with quarantine threat name."
              },
              {
                "name": "category",
                "value": "",
                "type": "query",
                "description": "Search with quarantine category."
              },
              {
                "name": "type",
                "value": "",
                "type": "query",
                "description": "Search with quarantine type"
              },
              {
                "name": "since",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter since quarantine scan times."
              },
              {
                "name": "until",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter until quarantine scan times."
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get all the quarantined items. Refer to Jobs apis to restore and delete items from quarantine"
        },
        {
          "info": {
            "name": "Bulk quarantine action",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/quarantine/action",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Issue Delete/Restore all quarantines job to a machine with machine id"
        },
        {
          "info": {
            "name": "Search quarantines",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/quarantine/search",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search all quarantined items scoped by account. It's possible to add some constraints to filter the result"
        },
        {
          "info": {
            "name": "Export quarantine",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/quarantine/export",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              },
              {
                "name": "name",
                "value": "",
                "type": "query",
                "description": "Search with quarantine threat name."
              },
              {
                "name": "category",
                "value": "",
                "type": "query",
                "description": "Search with quarantine category."
              },
              {
                "name": "type",
                "value": "",
                "type": "query",
                "description": "Search with quarantine type"
              },
              {
                "name": "since",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter since quarantine scan times."
              },
              {
                "name": "until",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter until quarantine scan times."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Export quarantined items data. You can export only per one account at a time. Specify your interested fields and the output format.\n\nSupported output formats: csv, xlsx, json.\n\n## Settings\n\n| Name | Description |\n|------|-------------|\n| download | If set to true, the server will set the `Content-Disposition` header using the `filename` and `format` |\n| select | Which fields to select, and which field name to map to. See request schema for allowed values |\n| type | Output encoding (for `csv` and"
        },
        {
          "info": {
            "name": "Get all quarantine",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/quarantine",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              },
              {
                "name": "name",
                "value": "",
                "type": "query",
                "description": "Search with quarantine threat name."
              },
              {
                "name": "category",
                "value": "",
                "type": "query",
                "description": "Search with quarantine category."
              },
              {
                "name": "type",
                "value": "",
                "type": "query",
                "description": "Search with quarantine type"
              },
              {
                "name": "since",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter since quarantine scan times."
              },
              {
                "name": "until",
                "value": "",
                "type": "query",
                "description": "Timestamp to filter until quarantine scan times."
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get all quarantined items scoped by account. Refer to the Jobs apis to restore and delete items from quarantine"
        },
        {
          "info": {
            "name": "Search quarantine",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/quarantine/search",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search all quarantined items scoped by (parent) account. It's possible to add some constraints to filter the result"
        }
      ]
    }
  ],
  "bundled": true
}