{
  "opencollection": "1.0.0",
  "info": {
    "name": "ThreatDown XDR API",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "XDR",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Get alert details",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/xdr/alerts/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path"
              },
              {
                "name": "source",
                "value": "",
                "type": "query",
                "description": "Alert source"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get an XDR alert and its full details by ID."
        },
        {
          "info": {
            "name": "Set alert action taken",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/xdr/alerts/:id/action",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Set alert action taken and comment"
        },
        {
          "info": {
            "name": "Set alert status",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/xdr/alerts/status",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Set alert status"
        },
        {
          "info": {
            "name": "Set alert action taken in bulk",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/xdr/alerts/action",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Set alert action taken and comment for multiple XDR alerts"
        }
      ]
    }
  ],
  "bundled": true
}