openapi: 3.1.0 info: title: InsightAppSec Accounts Asset API description: '

Welcome to the reference documentation for the public APIs available for InsightAppSec.

Here are a few resources to help you learn how to start using our APIs:

After you''ve got the basics down, you can use this API guide to find examples of requests and responses.

Permissions

This API uses the platform role of a user''s API key to inherit a set of permissions.

Notes:

  • Platform Admins do not require explicit access to an App in order to see it, or anything associated with it
  • Organization keys will inherit Product Admin permissions.
  • RolePermissions
    Product Admin
  • Manage Apps
  • Read Attack Templates
  • Manage Targets
  • Manage Scan Configs
  • Manage Scans
  • Manage Vulnerabilities
  • Administer Vulnerability Comments
  • Manage Engines
  • Manage Engine Groups
  • Manage Schedules
  • Manage Blackouts
  • Manage Global Blackouts
  • Manage Files
  • Manage Tags
  • Manage PDF Report
  • Read Write
  • Manage Apps
  • Read Attack Templates
  • Read Targets
  • Manage Scan Configs
  • Manage Scans
  • Manage Vulnerabilities
  • Manage Vulnerability Comments
  • Read Engines
  • Read Engine Groups
  • Manage Schedules
  • Manage Blackouts
  • Manage Files
  • Manage Tags
  • Manage PDF Report
  • Read Only
  • Read Apps
  • Read Attack Templates
  • Read Targets
  • Read Scan Configs
  • Read Scans
  • Read Vulnerabilities
  • Read Vulnerability Comments
  • Read Engines
  • Read Engine Groups
  • Read Schedules
  • Read Blackouts
  • Read Files
  • Read Tags
  • Read PDF Report
  • Pagination Parameters

    The following query parameters can be used to control the order, offset and size of the returned data

    ParameterDescriptionExample
    index

    The 0-based index of the page of data desired (default: 0)

    ?index=2
    size

    The size of the page of data desired (min: 1, max: 1000, default: 50)

    ?size=10
    sort

    The sort terms and (optional) directions for the desired ordering of data (default: specific to each resource)

    ?sort=scan.submit_time,DESC,scan.status
    page-token

    The page token, used as an alternative to index (default: Not provided)

    ?page-token=NDM0NTk0NTIyOjo6X1M6OjpiYW5hbmFz

    Paging using a page token

    When intending to page beyond the 10,000th result, or as an alternative to using the index query parameter, the page-token option may be used instead. After retrieving the first page, the page_token will be present in the metadata section of the response.
    For example, with size=99, index=0 to index=99 may be used. To load the next page, use the page_token value used in the response e.g. ?page-token=NDM0NTk0NTIyO

    Creating resources

    As is generally the accepted practice with REST-ful APIs, creating a resource can be performed by sending an appropriately formatted POST request. Any ID provided for a new resource in a POST request body will simply be ignored (and a new one generated internally and returned as part of the resource in subsequent GET requests), and POST requests to URLs following a format similar to .../resource/ are unsupported and should respond with 415 Method Not Allowed. All requests which successfully create a resource and respond with 201 Created will contain a Location header the value of which is an absolute URI for the resource (the ID of which can be determined as the last section of the path in the given URI). For example:
    Location: https://us.api.insight.rapid7.com/ias/v1/scans/12345678-1234-5678-90AB-1234567890AB

    Date, Time and Timezone Support

    The value of date and date-time type properties are fixed to the common ISO-8601 format. Unless otherwise specified, all date or date-time data in response bodies are expressed in UTC, and it is also expected that data provided in request bodies are also expressed in UTC.

    Schedules and Blackouts

    The first_start and first_end properties of both Blackouts and Schedules, and the last_start property of Blackouts may be specified with a timezone. If the timezone is not specified, it is assumed to be UTC. For example:
    2019-08-12T14:00:00.000000Z[Asia/Tokyo]
    It is also possible to specify the timezone as an offset of either GMT or UTC. For example:
    2019-09-04T15:00:00.000000Z[GMT+03:00]

    ValueFormatNotes
    DateYYYY-MM-DDDefaults to 12 am UTC (if used for a date & time)
    Date & time onlyYYYY-MM-DD''T''hh:mm:ss[.nnn]Defaults to UTC
    Date & time in UTCYYYY-MM-DD''T''hh:mm:ss[.nnn]Z
    Date & time with specific timezoneYYYY-MM-DD''T''hh:mm:ss[.nnn]Z[TimeZoneId]

    Searching and Filtering

    One characteristic of a powerful API is support for complex search and filtering of resources using a flexible query language. It is entirely possible to provide basic search and filtering functionality on standard GET resource collection operations using HTTP query parameters, but this becomes restrictive when attempting to encode boolean logic. Other solutions are also possible but come with equally restrictive compromises. The most effective way to facilitate this complex search and filtering is to provide it as a top-level API with a robust Domain-Specific Language (DSL).

    For simple data retrieval that supports paging and sorting functionality, use the traditional resource-specific GET collection operations; for more complex data retrieval that supports a user-crafted query DSL, use the global Search operation.

    Errors

    Any response from the API with an HTTP Status Code in the 4xx or 5xx range indicates an error. If in the 4xx range it indicates a client-side error, where in the 5xx range it indicates a server-side error. All responses indicating an error should be JSON formatted, and contain both a "status" and a "message" property indicating the cause of the error, a "r7-correlation-id" header should also always be returned in the format of a UUID, which uniquely identifies the HTTP exchange that took place and caused the error (this header is present on every request). On some occasions, an "error_code" property will be included in the response body, which can provide the support team further context into the cause of the error in cases where the message is not explicitly clear.

    When contacting support about error responses received from the API, please attempt to include, at minimum:

    Validation Errors

    Specifically, when a response with an HTTP Status Code of 422 is returned, this indicates a validation error, almost always received in a response from a non-idempotent request (normally PUT, POST or DELETE). In this case, there should be an additional "errors" property included in the JSON response body that should describe the cause of the validation exception; this will almost always require a modification to the request body to resolve.

    ' version: v1 servers: - url: https://[region].api.insight.rapid7.com/ias/v1 tags: - name: Asset description: Resources and operations for managing assets. Assets can be created under the Site Assets resource. paths: /api/3/assets: get: tags: - Asset summary: Assets description: Returns all assets for which you have access. operationId: getAssets schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: page in: query description: The index of the page (zero-based) to retrieve. required: false type: integer default: 0 format: int32 - name: size in: query description: The number of records per page to retrieve. required: false type: integer default: 10 format: int32 - name: sort in: query description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.' required: false type: array items: type: string collectionFormat: multi responses: '200': description: OK schema: $ref: '#/definitions/PageOf«Asset»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/sites/{id}/assets: post: tags: - Asset summary: Assets description: Creates or updates an asset with the specified details. operationId: createAsset schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the site. required: true type: integer format: int32 - in: body name: asset description: "The details of the asset being added or updated. \nThe operating system can be specified in one of three ways, with the order of precedence: `\"osFingerprint\"`, `\"os\"`, `\"cpe\"`" required: false schema: $ref: '#/definitions/AssetCreate' responses: '200': description: OK schema: $ref: '#/definitions/CreatedReference' examples: {} headers: {} '201': description: Created schema: $ref: '#/definitions/CreatedOrUpdatedReference' examples: {} headers: {} '400': description: Bad Request schema: $ref: '#/definitions/BadRequestError' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/search: post: tags: - Asset summary: Asset Search description: Returns all assets for which you have access that match the given search criteria. operationId: findAssets schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - in: body name: param1 description: param1 required: true schema: $ref: '#/definitions/SearchCriteria' - name: page in: query description: The index of the page (zero-based) to retrieve. required: false type: integer default: 0 format: int32 - name: size in: query description: The number of records per page to retrieve. required: false type: integer default: 10 format: int32 - name: sort in: query description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.' required: false type: array items: type: string collectionFormat: multi responses: '200': description: OK schema: $ref: '#/definitions/PageOf«Asset»' examples: {} headers: {} '400': description: Bad Request schema: $ref: '#/definitions/BadRequestError' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] x-code-samples: - lang: Assets Running SSH source: "{\n \"match\": \"all\",\n \"filters\": [\n { \"field\": \"service-name\", \"operator\": \"contains\", \"value\": \"ssh\"}\n ]\n}" - lang: High Risk Windows Assets Running SSH source: "{\n \"match\": \"all\",\n \"filters\": [\n { \"field\": \"risk-score\", \"operator\": \"is-greater-than\", \"value\": 5000 },\n { \"field\": \"operating-system\", \"operator\": \"contains\", \"value\": \"windows\" },\n { \"field\": \"service-name\", \"operator\": \"contains\", \"value\": \"ssh\" }\n ]\n}" - lang: Windows 10 Assets source: "{\n \"match\": \"all\",\n \"filters\": [\n { \"field\": \"operating-system\", \"operator\": \"contains\", \"value\": \"Microsoft Windows 10\" }\n ]\n}" - lang: Assets with High CVSS Scores assigned to Bob source: "{\n \"match\": \"all\",\n \"filters\": [\n { \"field\": \"owner-tag\", \"operator\": \"contains\", \"value\": \"Bob\" },\n { \"field\": \"vulnerability-cvss-score\", \"operator\": \"is-greater-than\", \"value\": 8 }\n ]\n}" - lang: Assets with SSH running containers in Los Angeles source: "{\n \"match\": \"all\",\n \"filters\": [\n { \"field\": \"location-tag\", \"operator\": \"contains\", \"value\": \"Los Angeles Datacenter\" },\n { \"field\": \"containers\", \"operator\": \"are\", \"value\": \"0\" },\n { \"field\": \"service-name\", \"operator\": \"contains\", \"value\": \"ssh\" }\n ]\n}" /api/3/assets/{id}: get: tags: - Asset summary: Asset description: Returns the specified asset. operationId: getAsset schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Asset' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] delete: tags: - Asset summary: Asset description: Deletes the specified asset. operationId: deleteAsset schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Links' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/databases: get: tags: - Asset summary: Asset Databases description: Returns the databases enumerated on an asset. operationId: getAssetDatabases schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Resources«Database»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/files: get: tags: - Asset summary: Asset Files description: Returns the files discovered on an asset. operationId: getAssetFiles schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Resources«File»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/services: get: tags: - Asset summary: Asset Services description: Returns the services discovered on an asset. operationId: getAssetServices schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/ReferencesWith«ReferenceWithEndpointIDLink,ServiceLink»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/services/{protocol}/{port}: get: tags: - Asset summary: Asset Service description: Returns the service running a port and protocol on the asset. operationId: getAssetService schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: protocol in: path description: The protocol of the service. required: true type: string enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw - name: port in: path description: The port of the service. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/Service' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/services/{protocol}/{port}/configurations: get: tags: - Asset summary: Asset Service Configurations description: Returns the configuration (properties) of a port and protocol on an asset. operationId: getAssetServiceConfigurations schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: protocol in: path description: The protocol of the service. required: true type: string enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw - name: port in: path description: The port of the service. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/Resources«Configuration»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/services/{protocol}/{port}/databases: get: tags: - Asset summary: Asset Service Databases description: Returns the databases running on a port and protocol on an asset. operationId: getAssetServiceDatabases schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: protocol in: path description: The protocol of the service. required: true type: string enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw - name: port in: path description: The port of the service. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/Resources«Database»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/services/{protocol}/{port}/user_groups: get: tags: - Asset summary: Asset Service User Groups description: Returns the user groups enumerated on a port and protocol on an asset. operationId: getAssetServiceUserGroups schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: protocol in: path description: The protocol of the service. required: true type: string enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw - name: port in: path description: The port of the service. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/Resources«GroupAccount»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/services/{protocol}/{port}/users: get: tags: - Asset summary: Asset Service Users description: Returns the users enumerated on a port and protocol on an asset. operationId: getAssetServiceUsers schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: protocol in: path description: The protocol of the service. required: true type: string enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw - name: port in: path description: The port of the service. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/Resources«UserAccount»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/services/{protocol}/{port}/web_applications: get: tags: - Asset summary: Asset Service Web Applications description: Returns the web applications running on a port and protocol on an asset. operationId: getAssetServiceWebApplications schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: protocol in: path description: The protocol of the service. required: true type: string enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw - name: port in: path description: The port of the service. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/ReferencesWith«WebApplicationID,Link»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/services/{protocol}/{port}/web_applications/{webApplicationId}: get: tags: - Asset summary: Asset Service Web Application description: Returns a web application running on a port and protocol on an asset. operationId: getAssetServiceWebApplication schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: protocol in: path description: The protocol of the service. required: true type: string enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw - name: port in: path description: The port of the service. required: true type: integer format: int32 - name: webApplicationId in: path description: The identifier of the web application. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/WebApplication' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/software: get: tags: - Asset summary: Asset Software description: Returns the software on an asset. operationId: getAssetSoftware schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Resources«Software»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/tags: get: tags: - Asset summary: Asset Tags description: Returns tags assigned to an asset. operationId: getAssetTags schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Resources«AssetTag»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/tags/{tagId}: put: tags: - Asset summary: Asset Tag description: Assigns the specified tag to the asset. operationId: addAssetTag schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: tagId in: path description: The identifier of the tag. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/Links' examples: {} headers: {} '400': description: Bad Request schema: $ref: '#/definitions/BadRequestError' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] delete: tags: - Asset summary: Asset Tag description: Removes the specified tag from the asset's tags. operationId: removeAssetTag schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 - name: tagId in: path description: The identifier of the tag. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/Links' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/user_groups: get: tags: - Asset summary: Asset User Groups description: Returns user groups enumerated on an asset. operationId: getAssetUserGroups schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Resources«GroupAccount»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/assets/{id}/users: get: tags: - Asset summary: Asset Users description: Returns users enumerated on an asset. operationId: getAssetUsers schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the asset. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Resources«UserAccount»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/operating_systems: get: tags: - Asset summary: Operating Systems description: 'Returns all operating systems discovered across all assets. ' operationId: getOperatingSystems schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: page in: query description: The index of the page (zero-based) to retrieve. required: false type: integer default: 0 format: int32 - name: size in: query description: The number of records per page to retrieve. required: false type: integer default: 10 format: int32 - name: sort in: query description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.' required: false type: array items: type: string collectionFormat: multi responses: '200': description: OK schema: $ref: '#/definitions/PageOf«OperatingSystem»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/operating_systems/{id}: get: tags: - Asset summary: Operating System description: Returns the details for an operating system. operationId: getOperatingSystem schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the operating system. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/OperatingSystem' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/software: get: tags: - Asset summary: Software description: Returns all software enumerated on any asset. operationId: getSoftwares schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: page in: query description: The index of the page (zero-based) to retrieve. required: false type: integer default: 0 format: int32 - name: size in: query description: The number of records per page to retrieve. required: false type: integer default: 10 format: int32 - name: sort in: query description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.' required: false type: array items: type: string collectionFormat: multi responses: '200': description: OK schema: $ref: '#/definitions/PageOf«Software»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/software/{id}: get: tags: - Asset summary: Software description: Returns the details for software. operationId: getSoftware schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the software. required: true type: integer format: int64 responses: '200': description: OK schema: $ref: '#/definitions/Software' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] definitions: File: type: object required: - name - type properties: attributes: type: array description: Attributes detected on the file. items: $ref: '#/definitions/Configuration' name: type: string example: ADMIN$ description: The name of the file. size: type: integer format: int64 example: -1 description: The size of the regular file (in bytes). If the file is a directory, no value is returned. type: type: string example: directory description: The type of the file. enum: - file - directory description: '' ReferenceWithEndpointIDLink: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. readOnly: true items: $ref: '#/definitions/Link' port: type: integer format: int32 example: 22 description: The port of the service. protocol: type: string example: tcp description: The protocol of the service. enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw description: '' Configuration: type: object required: - name properties: name: type: string example: description: The name of the configuration value. value: type: string example: description: The configuration value. description: '' UniqueId: type: object required: - id properties: id: type: string example: c56b2c59-4e9b-4b89-85e2-13f8146eb071 description: The unique identifier. source: type: string example: WQL description: The source of the unique identifier. description: '' AssetHistory: type: object properties: date: type: string example: '2018-04-09T06:23:49Z' description: The date the asset information was collected or changed. description: type: string example: '' description: Additional information describing the change. scanId: type: integer format: int64 example: 12 description: If a scan-oriented change, the identifier of the corresponding scan the asset was scanned in. type: type: string example: SCAN description: "The type of change. May be one of: \n| Type | Source of Data | \n| ----------------------------------- | ----------------------------------------------------------- | \n| `ASSET-IMPORT`, `EXTERNAL-IMPORT` | External source such as the API | \n| `EXTERNAL-IMPORT-APPSPIDER` | Rapid7 InsightAppSec (previously known as AppSpider) | \n| `SCAN` | Scan engine scan | \n| `AGENT-IMPORT` | Rapid7 Insight Agent | \n| `ACTIVE-SYNC` | ActiveSync | \n| `SCAN-LOG-IMPORT` | Manual import of a scan log | \n| `VULNERABILITY_EXCEPTION_APPLIED` | Vulnerability exception applied | \n| `VULNERABILITY_EXCEPTION_UNAPPLIED` | Vulnerability exception unapplied |" user: type: string example: '' description: If a vulnerability exception change, the login name of the user that performed the operation. version: type: integer format: int32 example: 8 description: 'The version number of the change (a chronological incrementing number starting from 1). ' vulnerabilityExceptionId: type: integer format: int32 example: '' description: If a vulnerability exception change, the identifier of the vulnerability exception that caused the change. description: '' ReferencesWith«WebApplicationID,Link»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The identifiers of the associated resources. items: type: integer format: int64 description: '' SwaggerSearchCriteriaFilter: type: object properties: field: type: string example: '' description: The filter field for the search criteria. lower: type: object example: '' description: The lower value to match in a range criteria. operator: type: string example: '' description: The operator on how to match the search criteria. upper: type: object example: '' description: The upper value to match in a range criteria. value: type: object example: '' description: The single value to match using the operator. values: type: array description: An array of values to match using the operator. items: type: object description: '' OperatingSystem: type: object properties: architecture: type: string example: x86 description: The architecture of the operating system. configurations: type: array description: Configuration key-values pairs enumerated on the operating system. items: $ref: '#/definitions/Configuration' cpe: example: '' description: The Common Platform Enumeration (CPE) of the operating system. $ref: '#/definitions/OperatingSystemCpe' description: type: string example: Microsoft Windows Server 2008 Enterprise Edition SP1 description: The description of the operating system (containing vendor, family, product, version and architecture in a single string). family: type: string example: Windows description: The family of the operating system. id: type: integer format: int64 example: 35 description: The identifier of the operating system. product: type: string example: Windows Server 2008 Enterprise Edition description: The name of the operating system. systemName: type: string example: Microsoft Windows description: A combination of vendor and family (with redundancies removed), suitable for grouping. type: type: string example: Workstation description: The type of operating system. vendor: type: string example: Microsoft description: The vendor of the operating system. version: type: string example: SP1 description: The version of the operating system. description: '' NotFoundError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '404' description: The HTTP status code for the error (same as in the HTTP response). enum: - '404' description: '' Resources«UserAccount»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The resources returned. items: $ref: '#/definitions/UserAccount' description: '' Resources«Configuration»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The resources returned. items: $ref: '#/definitions/Configuration' description: '' PageOf«Asset»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' page: example: '' description: The details of pagination indicating which page was returned, and how the remaining pages can be retrieved. $ref: '#/definitions/PageInfo' resources: type: array description: The page of resources returned. items: $ref: '#/definitions/Asset' description: '' InternalServerError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '500' description: The HTTP status code for the error (same as in the HTTP response). enum: - '500' description: '' Resources«AssetTag»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The resources returned. items: $ref: '#/definitions/AssetTag' description: '' Database: type: object required: - name properties: description: type: string example: Microsoft SQL Server description: The description of the database instance. id: type: integer format: int32 example: 13 description: The identifier of the database. name: type: string example: MSSQL description: The name of the database instance. description: '' GroupAccount: type: object required: - name properties: id: type: integer format: int32 example: 972 description: The identifier of the user group. name: type: string example: Administrators description: The name of the user group. description: '' Links: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' description: '' PageOf«Software»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' page: example: '' description: The details of pagination indicating which page was returned, and how the remaining pages can be retrieved. $ref: '#/definitions/PageInfo' resources: type: array description: The page of resources returned. items: $ref: '#/definitions/Software' description: '' Resources«Database»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The resources returned. items: $ref: '#/definitions/Database' description: '' HostName: type: object required: - name properties: name: type: string example: corporate-workstation-1102DC.acme.com description: The host name (local or FQDN). source: type: string example: DNS description: The source used to detect the host name. `user` indicates the host name source is user-supplied (e.g. in a site target definition). enum: - user - dns - netbios - dce - epsec - ldap - other description: '' CreatedOrUpdatedReference: type: object properties: id: type: object example: '3' description: The identifier of the resource created or updated. links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' description: '' WebApplication: type: object properties: id: type: integer format: int64 example: 30712 description: The identifier of the web application. pages: type: array description: The pages discovered on the web application. items: $ref: '#/definitions/WebPage' root: type: string example: / description: The web root of the web application. virtualHost: type: string example: 102.89.22.253 description: The virtual host of the web application. description: '' UserAccount: type: object properties: fullName: type: string example: Smith, John description: The full name of the user account. id: type: integer format: int32 example: 8952 description: The identifier of the user account. name: type: string example: john_smith description: The name of the user account. description: '' TagAssetSource: type: object properties: id: type: integer format: int32 example: 92 description: If the `source` is `"asset-group"` or `"site"` the identifier of the asset group or site that causes the tag to apply to the asset. links: type: array description: Hypermedia links to corresponding or related resources. readOnly: true items: $ref: '#/definitions/Link' source: type: string example: site description: The source by which a tag applies to an asset. enum: - site - asset-group - criteria - tag - unknown description: '' UnauthorizedError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '401' description: The HTTP status code for the error (same as in the HTTP response). enum: - '401' description: '' PageOf«OperatingSystem»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' page: example: '' description: The details of pagination indicating which page was returned, and how the remaining pages can be retrieved. $ref: '#/definitions/PageInfo' resources: type: array description: The page of resources returned. items: $ref: '#/definitions/OperatingSystem' description: '' SearchCriteria: type: object properties: filters: type: array description: Filters used to match assets. See Search Criteria for more information on the structure and format. items: $ref: '#/definitions/SwaggerSearchCriteriaFilter' match: type: string example: all description: Operator to determine how to match filters. `all` requires that all filters match for an asset to be included. `any` requires only one filter to match for an asset to be included. enum: - any - all description: '' AssetTag: type: object required: - name - type properties: color: type: string example: default description: The color to use when rendering the tag in a user interface. enum: - default - blue - green - orange - red - purple created: type: string example: '2017-10-07T23:50:01.205Z' description: The date and time the tag was created. id: type: integer format: int32 example: 6 description: The identifier of the tag. readOnly: true links: type: array description: Hypermedia links to corresponding or related resources. readOnly: true items: $ref: '#/definitions/Link' name: type: string example: My Custom Tag description: The name (label) of the tab. riskModifier: type: object example: '2.0' description: 'The amount to adjust risk of an asset tagged with this tag. ' searchCriteria: $ref: '#/definitions/SearchCriteria' source: type: string example: custom description: The source of the tag. readOnly: true enum: - built-in - custom sources: type: array description: The source(s) by which a tag is-applied to an asset. items: $ref: '#/definitions/TagAssetSource' type: type: string example: custom description: The type of the tag. enum: - custom - location - owner - criticality description: '' Address: type: object properties: ip: type: string example: 123.245.34.235 description: The IPv4 or IPv6 address. mac: type: string example: 12:34:56:78:90:AB description: The Media Access Control (MAC) address. The format is six groups of two hexadecimal digits separated by colons. description: '' ServiceLink: type: object properties: href: type: string example: https://hostname:3780/api/3/... description: 'A hypertext reference, which is either a URI (see RFC 3986) or URI template (see RFC 6570). ' port: type: integer format: int32 example: 22 description: The port of the service. protocol: type: string example: tcp description: The protocol of the service. enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw rel: type: string example: Service description: The link relation type. This value is one from the Link Relation Type Registry or is the type of resource being linked to. description: '' Resources«GroupAccount»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The resources returned. items: $ref: '#/definitions/GroupAccount' description: '' ServiceUnavailableError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '503' description: The HTTP status code for the error (same as in the HTTP response). enum: - '503' description: '' Resources«File»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The resources returned. items: $ref: '#/definitions/File' description: '' ReferencesWith«ReferenceWithEndpointIDLink,ServiceLink»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/ServiceLink' resources: type: array description: The identifiers of the associated resources. items: $ref: '#/definitions/ReferenceWithEndpointIDLink' description: '' Resources«Software»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The resources returned. items: $ref: '#/definitions/Software' description: '' BadRequestError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '400' description: The HTTP status code for the error (same as in the HTTP response). enum: - '400' description: '' Software: type: object properties: configurations: type: array description: The attributes of the software. items: $ref: '#/definitions/Configuration' cpe: example: '' description: The Common Platform Enumeration (CPE) of the software. $ref: '#/definitions/SoftwareCpe' description: type: string example: Microsoft Outlook 2013 15.0.4867.1000 description: The description of the software. family: type: string example: Office 2013 description: The family of the software. id: type: integer format: int64 product: type: string example: Outlook 2013 description: The product of the software. type: type: string example: Productivity description: The version of the software. vendor: type: string example: Microsoft description: The vendor of the software. version: type: string example: 15.0.4867.1000 description: The version of the software. description: '' WebPage: type: object properties: linkType: type: string example: html-ref description: The type of link used to traverse or detect the page. enum: - seed - html-ref - robots - js-string - query-param - pdf - css - implied-dir - rss - redirection - sitemap - backup - vck-rewrite - non-ref-guess - soft-404 path: type: string example: /docs/config/index.html description: The path to the page (URI). response: type: integer format: int32 example: 200 description: The HTTP response code observed with retrieving the page. description: '' AssetCreate: type: object required: - date properties: addresses: type: array description: All addresses discovered on the asset. items: $ref: '#/definitions/Address' assessedForPolicies: type: boolean example: false description: Whether the asset has been assessed for policies at least once. readOnly: true assessedForVulnerabilities: type: boolean example: true description: Whether the asset has been assessed for vulnerabilities at least once. readOnly: true configurations: type: array description: Configuration key-values pairs enumerated on the asset. items: $ref: '#/definitions/Configuration' cpe: type: string example: '' description: The Common Platform Enumeration (CPE) of the operating system. This is the tertiary means of specifying the operating system fingerprint. Use `"osFingerprint"` or `"os"` as a more accurate means of defining the operating system. databases: type: array description: The databases enumerated on the asset. items: $ref: '#/definitions/Database' date: type: string example: '' description: The date the data was collected on the asset. description: type: string example: '' description: The description of the source or collection of information on the asset. This description will appear in the history of the asset for future auditing purposes. files: type: array description: The files discovered with searching on the asset. items: $ref: '#/definitions/File' history: type: array description: The history of changes to the asset over time. readOnly: true items: $ref: '#/definitions/AssetHistory' hostName: example: corporate-workstation-1102DC.acme.com description: The primary host name (local or FQDN) of the asset. $ref: '#/definitions/HostName' hostNames: type: array description: Additional host names for the asset. items: $ref: '#/definitions/HostName' id: type: integer format: int64 example: 282 description: The identifier of the asset. ids: type: array description: Unique identifiers found on the asset, such as hardware or operating system identifiers. items: $ref: '#/definitions/UniqueId' ip: type: string example: 182.34.74.202 description: The primary IPv4 or IPv6 address of the asset. links: type: array items: $ref: '#/definitions/Link' mac: type: string example: AB:12:CD:34:EF:56 description: The primary Media Access Control (MAC) address of the asset. The format is six groups of two hexadecimal digits separated by colons. os: type: string example: '' description: Free-form textual description of the operating system of the asset, typically from a fingerprinting source. This input will be parsed to produce a full fingerprint. This is the secondary means of specifying the operating system. Use `osFingerprint` for a more accurate definition. osFingerprint: example: '' description: The details of the operating system of the asset. At least one of `vendor`, `family`, or `product` must be supplied. This is the preferred means of defining the operating system. $ref: '#/definitions/OperatingSystem' rawRiskScore: type: number format: double example: 31214.3 description: The base risk score of the asset. readOnly: true riskScore: type: number format: double example: 37457.16 description: The risk score (with criticality adjustments) of the asset. readOnly: true services: type: array description: The services discovered on the asset. items: $ref: '#/definitions/Service' software: type: array description: The software discovered on the asset. items: $ref: '#/definitions/Software' type: type: string example: '' description: The type of asset. userGroups: type: array description: The group accounts enumerated on the asset. items: $ref: '#/definitions/GroupAccount' users: type: array description: The user accounts enumerated on the asset. items: $ref: '#/definitions/UserAccount' vulnerabilities: example: '' description: Summary information for vulnerabilities on the asset. readOnly: true $ref: '#/definitions/AssetVulnerabilities' description: '' CreatedReference: type: object properties: id: type: object example: '1' description: The identifier of the resource created. links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' description: '' AssetVulnerabilities: type: object properties: critical: type: integer format: int64 example: 16 description: The number of critical vulnerabilities. readOnly: true exploits: type: integer format: int64 example: 4 description: The number of distinct exploits that can exploit any of the vulnerabilities on the asset. readOnly: true malwareKits: type: integer format: int64 example: 0 description: The number of distinct malware kits that vulnerabilities on the asset are susceptible to. readOnly: true moderate: type: integer format: int64 example: 3 description: The number of moderate vulnerabilities. readOnly: true severe: type: integer format: int64 example: 76 description: The number of severe vulnerabilities. readOnly: true total: type: integer format: int64 example: 95 description: The total number of vulnerabilities. readOnly: true description: '' SoftwareCpe: type: object required: - part properties: edition: type: string example: enterprise description: 'Edition-related terms applied by the vendor to the product. ' language: type: string example: '' description: Defines the language supported in the user interface of the product being described. The format is of the language tag adheres to RFC5646. other: type: string example: '' description: 'Captures any other general descriptive or identifying information which is vendor- or product-specific and which does not logically fit in any other attribute value. ' part: type: string example: o description: A single letter code that designates the particular platform part that is being identified. enum: - o - a - h product: type: string example: windows_server_2008 description: the most common and recognizable title or name of the product. swEdition: type: string example: '' description: 'Characterizes how the product is tailored to a particular market or class of end users. ' targetHW: type: string example: '' description: 'Characterize the instruction set architecture on which the product operates. ' targetSW: type: string example: '' description: Characterize the software computing environment within which the product operates. update: type: string example: sp1 description: Vendor-specific alphanumeric strings characterizing the particular update, service pack, or point release of the product. v2.2: type: string example: cpe:/o:microsoft:windows_server_2008:-:sp1:enterprise description: The full CPE string in the CPE 2.2 format. v2.3: type: string example: cpe:2.3:o:microsoft:windows_server_2008:-:sp1:enterprise:*:*:*:*:* description: The full CPE string in the CPE 2.3 format. vendor: type: string example: microsoft description: The person or organization that manufactured or created the product. version: type: string example: '-' description: Vendor-specific alphanumeric strings characterizing the particular release version of the product. description: '' PageInfo: type: object properties: number: type: integer format: int64 example: 6 description: The index (zero-based) of the current page returned. size: type: integer format: int64 example: 10 description: The maximum size of the page returned. totalPages: type: integer format: int64 example: 13 description: The total number of pages available. totalResources: type: integer format: int64 example: 123 description: The total number of resources available across all pages. description: '' Asset: type: object properties: addresses: type: array description: All addresses discovered on the asset. items: $ref: '#/definitions/Address' assessedForPolicies: type: boolean example: false description: Whether the asset has been assessed for policies at least once. readOnly: true assessedForVulnerabilities: type: boolean example: true description: Whether the asset has been assessed for vulnerabilities at least once. readOnly: true configurations: type: array description: Configuration key-values pairs enumerated on the asset. items: $ref: '#/definitions/Configuration' databases: type: array description: The databases enumerated on the asset. items: $ref: '#/definitions/Database' files: type: array description: The files discovered with searching on the asset. items: $ref: '#/definitions/File' history: type: array description: The history of changes to the asset over time. readOnly: true items: $ref: '#/definitions/AssetHistory' hostName: type: string example: corporate-workstation-1102DC.acme.com description: The primary host name (local or FQDN) of the asset. hostNames: type: array description: All host names or aliases discovered on the asset. items: $ref: '#/definitions/HostName' id: type: integer format: int64 example: 282 description: The identifier of the asset. ids: type: array description: Unique identifiers found on the asset, such as hardware or operating system identifiers. items: $ref: '#/definitions/UniqueId' ip: type: string example: 182.34.74.202 description: The primary IPv4 or IPv6 address of the asset. links: type: array description: Hypermedia links to corresponding or related resources. readOnly: true items: $ref: '#/definitions/Link' mac: type: string example: AB:12:CD:34:EF:56 description: The primary Media Access Control (MAC) address of the asset. The format is six groups of two hexadecimal digits separated by colons. os: type: string example: Microsoft Windows Server 2008 Enterprise Edition SP1 description: The full description of the operating system of the asset. osFingerprint: example: '' description: The details of the operating system of the asset. $ref: '#/definitions/OperatingSystem' rawRiskScore: type: number format: double example: 31214.3 description: The base risk score of the asset. readOnly: true riskScore: type: number format: double example: 37457.16 description: The risk score (with criticality adjustments) of the asset. readOnly: true services: type: array description: The services discovered on the asset. items: $ref: '#/definitions/Service' software: type: array description: The software discovered on the asset. items: $ref: '#/definitions/Software' type: type: string example: '' description: The type of asset. enum: - unknown - guest - hypervisor - physical - mobile userGroups: type: array description: The group accounts enumerated on the asset. items: $ref: '#/definitions/GroupAccount' users: type: array description: The user accounts enumerated on the asset. items: $ref: '#/definitions/UserAccount' vulnerabilities: example: '' description: Summary information for vulnerabilities on the asset. readOnly: true $ref: '#/definitions/AssetVulnerabilities' description: '' OperatingSystemCpe: type: object required: - part properties: edition: type: string example: enterprise description: 'Edition-related terms applied by the vendor to the product. ' language: type: string example: '' description: Defines the language supported in the user interface of the product being described. The format is of the language tag adheres to RFC5646. other: type: string example: '' description: 'Captures any other general descriptive or identifying information which is vendor- or product-specific and which does not logically fit in any other attribute value. ' part: type: string example: o description: A single letter code that designates the particular platform part that is being identified. enum: - o - a - h product: type: string example: windows_server_2008 description: the most common and recognizable title or name of the product. swEdition: type: string example: '' description: 'Characterizes how the product is tailored to a particular market or class of end users. ' targetHW: type: string example: '' description: 'Characterize the instruction set architecture on which the product operates. ' targetSW: type: string example: '' description: Characterize the software computing environment within which the product operates. update: type: string example: sp1 description: Vendor-specific alphanumeric strings characterizing the particular update, service pack, or point release of the product. v2.2: type: string example: cpe:/o:microsoft:windows_server_2008:-:sp1:enterprise description: The full CPE string in the CPE 2.2 format. v2.3: type: string example: cpe:2.3:o:microsoft:windows_server_2008:-:sp1:enterprise:*:*:*:*:* description: The full CPE string in the CPE 2.3 format. vendor: type: string example: microsoft description: The person or organization that manufactured or created the product. version: type: string example: '-' description: Vendor-specific alphanumeric strings characterizing the particular release version of the product. description: '' Service: type: object required: - port - protocol properties: configurations: type: array description: Configuration key-values pairs enumerated on the service. items: $ref: '#/definitions/Configuration' databases: type: array description: The databases enumerated on the service. items: $ref: '#/definitions/Database' family: type: string example: '' description: The family of the service. links: type: array description: Hypermedia links to corresponding or related resources. readOnly: true items: $ref: '#/definitions/Link' name: type: string example: CIFS Name Service description: The name of the service. port: type: integer format: int32 example: 139 description: The port of the service. product: type: string example: Samba description: The product running the service. protocol: type: string example: tcp description: The protocol of the service. enum: - ip - icmp - igmp - ggp - tcp - pup - udp - idp - esp - nd - raw userGroups: type: array description: The group accounts enumerated on the service. items: $ref: '#/definitions/GroupAccount' users: type: array description: The user accounts enumerated on the service. items: $ref: '#/definitions/UserAccount' vendor: type: string example: '' description: The vendor of the service. version: type: string example: 3.5.11 description: The version of the service. webApplications: type: array description: The web applications found on the service. items: $ref: '#/definitions/WebApplication' description: '' Link: type: object properties: href: type: string example: https://hostname:3780/api/3/... description: 'A hypertext reference, which is either a URI (see RFC 3986) or URI template (see RFC 6570). ' rel: type: string example: self description: The link relation type. This value is one from the Link Relation Type Registry or is the type of resource being linked to. description: ''