SOAR API endpoint mapping table
Supported in:
Legacy endpoints are exact replicas of the previous API structure and will be deprecated and eventually removed. They're now available in the new v1beta or v1 releases, which instead use resource-oriented endpoints. We recommend that you migrate to the new resource endpoints immediately.
| Old controller | Old API | Old method | New API | Permission |
|---|---|---|---|---|
| agents | /api/external/v1/agents/GetSecondaryAgentsByPrimaryIdentifiers | POST | GetRemoteAgent | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/GetValidAgentsForConnector/{environment}/{integration} | GET | ConnectorValidRemoteAgents | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/GetValidAgentsForIdeConnector/{environment}/{integration} | GET | ConnectorValidRemoteAgents | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/valid-for-jobs | GET | FetchRemoteAgentsCompatibleWithJobs | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/GetAgentsInformationByIdentifiers | POST | FetchRemoteAgentsInformation | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/RedeployAgent | POST | RedeployRemoteAgent | chronicle.googleapis.com/remoteAgents.update |
| agents | /api/external/v1/agents/AddAgent | POST | CreateRemoteAgent | chronicle.googleapis.com/remoteAgents.update |
| agents | /api/external/v1/agents/GetAgents | GET | ListRemoteAgents | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/GetAgentsByEnvironment | POST | ListRemoteAgents | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/GetEnabledAgents | GET | ListRemoteAgents | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/DeleteAgent | POST | DeleteRemoteAgent | chronicle.googleapis.com/remoteAgents.delete |
| agents | /api/external/v1/agents/GetAgentByIdentifier/{agentIdentifier} | GET | GetRemoteAgent | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/UpdateAgent | POST | UpdateRemoteAgent | chronicle.googleapis.com/remoteAgents.update |
| agents | /api/external/v1/agents/GetAvailableEnvironmentsForAgents | GET | ListRemoteAgents | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/GetAgentInformationByIdentifier/{agentIdentifier} | GET | FetchRemoteAgentsInformation | chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/GetAgentInformationByIntegrationInstance/{integrationInstanceId} | GET | LIST integration instances + FetchRemoteAgentsInformation | chronicle.googleapis.com/integrations.get, chronicle.googleapis.com/remoteAgents.get |
| agents | /api/external/v1/agents/AddOrUpdatePublisher | POST | - | #N/A |
| agents | /api/external/v1/agents/DeletePublishers | POST | - | #N/A |
| agents | /api/external/v1/agents/GetPublisherById/{publisherId} | GET | - | #N/A |
| agents | /api/external/v1/agents/GetPublishers | GET | - | #N/A |
| agents | /api/external/v1/agents/TestPublisherConnectivity/{publisherId} | GET | - | #N/A |
| approval-link | /api/external/v1/approval-link/Apply | POST | LegacyPlaybookApplyApprovalLink | chronicle.googleapis.com/legacyPlaybooks.update |
| attackssimulator | /api/external/v1/attackssimulator/CreateSimulatedCustomCase | POST | CreateSimulatedCustomCase | chronicle.googleapis.com/legacyCases.simulate |
| attackssimulator | /api/external/v1/attackssimulator/DeleteUseCase | POST | DeleteUseCase | chronicle.googleapis.com/legacyCases.deleteSimulated |
| attackssimulator | /api/external/v1/attackssimulator/ExportCustomCase/{customCaseName} | GET | ExportCustomCase | chronicle.googleapis.com/legacyCases.exportJson |
| attackssimulator | /api/external/v1/attackssimulator/GenerateUseCases | POST | GenerateUseCases | chronicle.googleapis.com/legacyCases.createSimulated |
| attackssimulator | /api/external/v1/attackssimulator/GetCustomCaseDetails | POST | GetCustomCaseDetails | chronicle.googleapis.com/legacyCases.get |
| attackssimulator | /api/external/v1/attackssimulator/GetCustomCases | GET | GetCustomCases | chronicle.googleapis.com/legacyCases.getSimulated |
| attackssimulator | /api/external/v1/attackssimulator/ImportCustomCase | POST | ImportCustomCase | chronicle.googleapis.com/legacyCases.importJson |
| attackssimulator | /api/external/v1/attackssimulator/IsCustomCaseExists/{alertName} | GET | IsCustomCaseExists | chronicle.googleapis.com/legacyCases.getSimulated |
| attackssimulator | /api/external/v1/attackssimulator/SimulateAlert | POST | SimulateAlert | chronicle.googleapis.com/legacyCases.ingestAlertTestCase |
| case-overview | /api/external/v1/case-overview/GetCaseOverviewData | POST | GetCaseOverview | chronicle.googleapis.com/cases.get |
| case-overview | /api/external/v1/case-overview/ResolveOverviewWidget | POST | ResolveCaseOverviewWidget | chronicle.googleapis.com/cases.get |
| case-overview | /api/external/v1/case-overview/GetAlertOverviewData | POST | GetAlertOverview | chronicle.googleapis.com/caseAlerts.get |
| case-overview | /api/external/v1/case-overview/GetAlertsEntities | POST | ListInvolvedEntities | chronicle.googleapis.com/involvedEntities.get |
| case-overview | /api/external/v1/case-overview/GetCaseEntities/{caseId} | GET | ListInvolvedEntities | chronicle.googleapis.com/involvedEntities.get |
| case-overview | /api/external/v1/case-overview/PreviewOverviewWidget | POST | GetView | chronicle.googleapis.com/views.get |
| case-overview | /api/external/v1/case-overview/GetOverviewTemplate | POST | GetOverviewTemplate | #N/A |
| case-overview | /api/external/v1/case-overview/SaveOverviewTemplate | POST | SaveOverviewTemplate | chronicle.googleapis.com/views.update |
| case-overview | /api/external/v1/case-overview/GetFullOverviewTemplateDetails/{templateIdentifier} | GET | GetView | #N/A |
| case-overview | /api/external/v1/case-overview/GetOverviewTemplateCards | GET | ListViews | #N/A |
| casechat | /api/external/v1/casechat/{caseId} | POST | CreateCaseChatMessage, CreateWithAttachment | #N/A |
| casechat | /api/external/v1/casechat/{caseId} | GET | ListCaseChatMessages | chronicle.googleapis.com/chatMessages.get |
| casechat | /api/external/v1/casechat/pin/{messageId} | POST | PinMessage | chronicle.googleapis.com/chatMessages.pin |
| casechat | /api/external/v1/casechat/unpin/{messageId} | POST | UnpinMessage | chronicle.googleapis.com/chatMessages.pin |
| casechat | /api/external/v1/casechat/{caseId}/new-messages-count | GET | UnreadMessagesCount | chronicle.googleapis.com/chatMessages.get |
| casechat | /api/external/v1/casechat/attachments/{attachmentId} | GET | Download | chronicle.googleapis.com/chatMessages.get |
| casechat | /api/external/v1/casechat/attachments/preview/{attachmentId} | GET | Download | chronicle.googleapis.com/chatMessages.get |
| cases | /api/external/v1/cases/RenameCase | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/CloseCase | POST | ExecuteBulkCloseCase | chronicle.googleapis.com/cases.close |
| cases | /api/external/v1/cases/CreateCaseInsight | POST | AddCaseInsight | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ExecuteBulkAddCaseTag | POST | ExecuteBulkAddTag | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/AddCaseTag | POST | AddCaseTag | chronicle.googleapis.com/cases.updateTag |
| cases | /api/external/v1/cases/AssignUserToCase | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ChangeCaseDescription | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ChangeCaseImportanceStatus | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ChangeCasePriority | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ChangeCaseStage | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ExecuteBulkAssign | POST | ExecuteBulkAssignCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ExecuteBulkChangeCasePriority | POST | ExecuteBulkChangePriority | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ExecuteBulkChangeCaseStage | POST | ExecuteBulkChangeStage | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/ExecuteBulkCloseCase | POST | ExecuteBulkCloseCase | chronicle.googleapis.com/cases.close |
| cases | /api/external/v1/cases/ExecuteBulkReopenCase | POST | ExecuteBulkReopenCase | chronicle.googleapis.com/cases.reopen |
| cases | /api/external/v1/cases/GetCaseCardsByRequest | POST | ListCases | chronicle.googleapis.com/cases.get |
| cases | /api/external/v1/cases/GetCaseExists/{caseId} | GET | GetCase | chronicle.googleapis.com/cases.get |
| cases | /api/external/v1/cases/GetCaseFullDetails/{caseId} | GET | GetCase, GetCaseAlert, ListConnectorEvents, ListInvolvedEntities | chronicle.googleapis.com/cases.get |
| cases | /api/external/v1/cases/homepagecases/GetByRequest | GET | ListCases | chronicle.googleapis.com/cases.get |
| cases | /api/external/v1/cases/homepagecases/GetHomepageCasesCount | GET | ListCases | chronicle.googleapis.com/cases.get |
| cases | /api/external/v1/cases/IsCaseUpdated | POST | GetCase | chronicle.googleapis.com/cases.get |
| cases | /api/external/v1/cases/UnraiseIncident | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/RaiseIncident | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| cases | /api/external/v1/cases/RemoveCaseTag | POST | RemoveCaseTag | chronicle.googleapis.com/cases.removeTag |
| cases | /api/external/v1/cases/insights/{caseId} | GET | GetCaseOverview | chronicle.googleapis.com/cases.get |
| cases | /api/external/v1/cases/wall/{caseId} | GET | ListCaseWallRecords | chronicle.googleapis.com/caseWallRecords.get |
| cases | /api/external/v1/cases/wall/favourite | PATCH | SetFavouriteWallRecord | chronicle.googleapis.com/caseWallRecords.update |
| cases | /api/external/v1/cases/PauseAlertSla | POST | PauseAlertSla | chronicle.googleapis.com/caseAlerts.updateSla |
| cases | /api/external/v1/cases/ResumeAlertSla | POST | ResumeAlertSla | chronicle.googleapis.com/caseAlerts.updateSla |
| cases | /api/external/v1/cases/CreateCaseEntity | POST | CreateInvolvedEntity | chronicle.googleapis.com/involvedEntities.update |
| cases | /api/external/v1/cases/comments | GET | ListCaseComments | chronicle.googleapis.com/caseComments.get |
| cases | /api/external/v1/cases/comments | POST | CreateCaseComment | chronicle.googleapis.com/caseComments.update |
| cases | /api/external/v1/cases/comments/{id} | PUT | UpdateCaseComment | chronicle.googleapis.com/caseComments.update |
| cases | /api/external/v1/cases/comments/file/{fileId} | GET | ExportAttachment | chronicle.googleapis.com/attachments.get |
| cases | /api/external/v1/cases/comments/mark-as-deleted/{id} | PATCH | DeleteCaseComment | chronicle.googleapis.com/caseComments.delete |
| cases | /api/external/v1/cases/AddCaseComment | POST | CreateCaseComment | chronicle.googleapis.com/caseComments.update |
| cases | /api/external/v1/cases/AddEvidence | POST | CreateCaseComment | chronicle.googleapis.com/caseComments.update |
| cases | /api/external/v1/cases/GetEvidenceData/{evidenceId} | GET | ExportAttachment | chronicle.googleapis.com/attachments.get |
| cases | /api/external/v1/cases/GenerateCaseReport | POST | GenerateCaseReport | chronicle.googleapis.com/cases.generateReport |
| cases | /api/external/v1/cases/CreateWarRoomIncidentFromCase | POST | - | #N/A |
| cases | /api/external/v1/cases/GetWallItemsForWarRoom/{id} | GET | - | #N/A |
| cases | /api/external/v1/cases/ReassignCaseTask | POST | UpdateTask | chronicle.googleapis.com/tasks.update |
| cases | /api/external/v1/cases/CreateCase | POST | CreateCase | chronicle.googleapis.com/legacyCases.ingest |
| cases | /api/external/v1/cases/ExecuteStep | POST | LegacyPlaybookExecuteStep | chronicle.googleapis.com/legacyPlaybooks.get |
| cases | /api/external/v1/cases/GetWorkflowInstanceSummary | POST | LegacyPlaybookGetWorkflowInstanceSummary | chronicle.googleapis.com/legacyPlaybooks.get |
| cases | /api/external/v1/cases/Skip | POST | LegacyPlaybookSkip | chronicle.googleapis.com/legacyPlaybooks.update |
| cases | /api/external/v1/cases/CreateManualCase | POST | CreateManualCase | chronicle.googleapis.com/legacyCases.ingest |
| cases | /api/external/v1/cases/ExecuteManualAction | POST | ExecuteManualAction | chronicle.googleapis.com/legacyCases.runManualAction |
| cases | /api/external/v1/cases/GetActionResultById/{resultIdStr} | GET | GetActionResultById | chronicle.googleapis.com/legacyCases.get |
| cases | /api/external/v1/cases/AddOrUpdateCaseTask | POST | CreateTask, UpdateTask | chronicle.googleapis.com/tasks.update, chronicle.googleapis.com/tasks.create |
| cases | /api/external/v1/cases/tasks | POST | CreateTask | chronicle.googleapis.com/tasks.update |
| cases | /api/external/v1/cases/tasks | PUT | UpdateTask | chronicle.googleapis.com/tasks.update |
| cases | /api/external/v1/cases/tasks/{id} | GET | GetTask | chronicle.googleapis.com/tasks.get |
| cases | /api/external/v1/cases/tasks/{id} | DELETE | DeleteTask | chronicle.googleapis.com/tasks.delete |
| cases | /api/external/v1/cases/tasks/GetByRequest | GET | ListTasks | chronicle.googleapis.com/tasks.get |
| cases | /api/external/v1/cases/tasks/GetTasksCountForUser | GET | ListTasks | chronicle.googleapis.com/tasks.get |
| cases | /api/external/v1/cases/tasks/MarkAsDone | PUT | UpdateTask | chronicle.googleapis.com/tasks.update |
| cases | /api/external/v1/cases/requests/GetByRequest | GET | GetRequestTemplate | chronicle.googleapis.com/requestTemplates.get |
| cases | /api/external/v1/cases/requests/GetCollaboratorRequestCount | GET | ListRequestTemplates | chronicle.googleapis.com/requestTemplates.get |
| cases-queue | /api/external/v1/cases-queue/saved-filter | GET | ListCaseQueueFilters | chronicle.googleapis.com/caseQueueFilters.get |
| cases-queue | /api/external/v1/cases-queue/saved-filter | POST | CreateCaseQueueFilter | chronicle.googleapis.com/caseQueueFilters.update |
| cases-queue | /api/external/v1/cases-queue/saved-filter | DELETE | DeleteCaseQueueFilter | chronicle.googleapis.com/caseQueueFilters.delete |
| cases-queue | /api/external/v1/cases-queue/bulk-operations/ExecuteBulkAssignCase | POST | ExecuteBulkAssignCase | chronicle.googleapis.com/cases.update |
| cases-queue | /api/external/v1/cases-queue/bulk-operations/ExecuteBulkCloseCase | POST | ExecuteBulkCloseCase | chronicle.googleapis.com/cases.close |
| cases-queue | /api/external/v1/cases-queue/bulk-operations/MergeCases | POST | MergeCases | chronicle.googleapis.com/cases.update |
| cases-queue | /api/external/v1/cases-queue/GetCaseCardsByRequest | POST | ListCase | chronicle.googleapis.com/cases.get |
| cases-queue | /api/external/v1/cases-queue/alert-vendors | GET | ListCaseAlerts | chronicle.googleapis.com/caseAlerts.get |
| cases-queue | /api/external/v1/cases-queue/GetAlertNames | POST | ListCaseAlerts | chronicle.googleapis.com/caseAlerts.get |
| cases-queue | /api/external/v1/cases-queue/bulk-operations/ValidateCasesAssigneeForCloseCase | POST | - | - |
| configuration-items | /api/external/v1/configuration-items/{tenantId} | GET | #N/A | #N/A |
| configuration-items | /api/external/v1/configuration-items/{tenantId} | PUT | #N/A | #N/A |
| connectors | /api/external/v1/connectors | POST | CreateConnectorInstance | chronicle.googleapis.com/connectorInstances.update |
| connectors | /api/external/v1/connectors/{identifier} | GET | GetConnectorInstance | chronicle.googleapis.com/connectorInstances.get |
| connectors | /api/external/v1/connectors/{identifier} | DELETE | DeleteConnectorInstance | chronicle.googleapis.com/connectorInstances.delete |
| connectors | /api/external/v1/connectors/{identifier}/statistics | GET | GetConnectorInstance | chronicle.googleapis.com/connectorInstances.get |
| connectors | /api/external/v1/connectors/cards | GET | ListConnectorInstances | chronicle.googleapis.com/connectorInstances.get |
| connectors | /api/external/v1/connectors/template | POST | ListConnectorInstances | chronicle.googleapis.com/connectorInstances.get |
| connectors | /api/external/v1/connectors/template-cards | GET | GetIntegrationConnector | chronicle.googleapis.com/connectors.get |
| connectors | /api/external/v1/connectors/update-from-ide | POST | FetchLatestDefinition | chronicle.googleapis.com/connectorInstances.get |
| connectors | /api/external/v1/connectors/fetch-sample-data | POST | RunOnDemandConnectorInstance | chronicle.googleapis.com/connectorInstances.update |
| dashboards | /api/external/v1/dashboards/AddOrUpdateDashboard | POST | LegacyAddOrUpdateDashboard | chronicle.googleapis.com/legacySoarDashboards.update |
| dashboards | /api/external/v1/dashboards/AddOrUpdateDashboardWidget | POST | LegacyAddOrUpdateDashboardWidget | chronicle.googleapis.com/legacySoarDashboards.update |
| dashboards | /api/external/v1/dashboards/DeleteDashboard | POST | LegacyDeleteDashboard | chronicle.googleapis.com/legacySoarDashboards.delete |
| dashboards | /api/external/v1/dashboards/DeleteDashboardWidget | POST | LegacyDeleteDashboardWidget | chronicle.googleapis.com/legacySoarDashboards.delete |
| dashboards | /api/external/v1/dashboards/GetDashboardWidgetCaseIds | POST | LegacyGetDashboardWidgetCaseIds | chronicle.googleapis.com/legacySoarDashboards.get |
| dashboards | /api/external/v1/dashboards/GetDashboardWidgetDefinitions | GET | LegacyGetDashboardWidgetDefinitions | chronicle.googleapis.com/legacySoarDashboards.get |
| dashboards | /api/external/v1/dashboards/GetDashboardWidgetValues | POST | LegacyGetDashboardWidgetValues | chronicle.googleapis.com/legacySoarDashboards.get |
| dashboards | /api/external/v1/dashboards/ImportDashboard | POST | LegacyImportDashboard | chronicle.googleapis.com/legacySoarDashboards.update |
| dashboards | /api/external/v1/dashboards/SaveDashboardAsReportTemplate | POST | LegacySaveDashboardAsReportTemplate | chronicle.googleapis.com/legacySoarDashboards.update |
| dynamic-cases | /api/external/v1/dynamic-cases/MoveAlertToNewCase | POST | MoveAlert | chronicle.googleapis.com/caseAlerts.move |
| dynamic-cases | /api/external/v1/dynamic-cases/RaiseIncident | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/RemoveCaseTag | POST | RemoveCaseTag | chronicle.googleapis.com/cases.removeTag |
| dynamic-cases | /api/external/v1/dynamic-cases/RenameCase | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/UnraiseIncident | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/UpdateCasePriority | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/GenerateCaseReport | POST | GenerateCaseReport | chronicle.googleapis.com/cases.generateReport |
| dynamic-cases | /api/external/v1/dynamic-cases/AssignUserToCase | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/ChangeCaseDescription | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/ChangeCaseImportanceStatus | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/ChangeCaseStage | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/GetCaseDetails/{caseId} | GET | GetCase | chronicle.googleapis.com/cases.get |
| dynamic-cases | /api/external/v1/dynamic-cases/IngestCaseInOtherEnvironment | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/CloseCase | POST | UpdateCase | chronicle.googleapis.com/cases.update |
| dynamic-cases | /api/external/v1/dynamic-cases/ExecuteBulkReopenCase | POST | ExecuteBulkReopenCase | chronicle.googleapis.com/cases.reopen |
| dynamic-cases | /api/external/v1/dynamic-cases/IsCaseUpdated | POST | GetCase | chronicle.googleapis.com/cases.get |
| dynamic-cases | /api/external/v1/dynamic-cases/UpdateAlertPriority | POST | UpdateAlert | chronicle.googleapis.com/caseAlerts.metadataUpdate |
| dynamic-cases | /api/external/v1/dynamic-cases/GetCaseWallActivities | POST | ListCaseWallRecords | chronicle.googleapis.com/caseWallRecords.get |
| dynamic-cases | /api/external/v1/dynamic-cases/GetCaseWallActivities/count | POST | ListCaseWallRecords] | chronicle.googleapis.com/caseWallRecords.get |
| dynamic-cases | /api/external/v1/dynamic-cases/GetEvidenceData/{evidenceId} | GET | GetCaseWallRecord | chronicle.googleapis.com/caseWallRecords.get |
| dynamic-cases | /api/external/v1/dynamic-cases/GetWallActivities/{caseId} | GET | ListCaseWallRecords | chronicle.googleapis.com/caseWallRecords.get |
| dynamic-cases | /api/external/v1/dynamic-cases/GetWallActivitiesV2/{caseId} | GET | ListCaseWallRecords | chronicle.googleapis.com/caseWallRecords.get |
| dynamic-cases | /api/external/v1/dynamic-cases/GetAlertEvents | POST | ListConnectorEvents | chronicle.googleapis.com/connectorEvents.get |
| dynamic-cases | /api/external/v1/dynamic-cases/CloseAlert | POST | UpdateAlert | chronicle.googleapis.com/caseAlerts.metadataUpdate |
| dynamic-cases | /api/external/v1/dynamic-cases/AddCaseComment | POST | CreateCaseComment | chronicle.googleapis.com/caseComments.update |
| dynamic-cases | /api/external/v1/dynamic-cases/AddComment | POST | CreateCaseComment | chronicle.googleapis.com/caseComments.update |
| dynamic-cases | /api/external/v1/dynamic-cases/AddCaseTag | POST | AddCaseTag | chronicle.googleapis.com/cases.updateTag |
| dynamic-cases | /api/external/v1/dynamic-cases/ReopenAlert | POST | UpdateAlert | chronicle.googleapis.com/caseAlerts.metadataUpdate |
| dynamic-cases | /api/external/v1/dynamic-cases/MarkCommentAsDeleted/{id} | PUT | DeleteCaseComment | chronicle.googleapis.com/caseComments.delete |
| dynamic-cases | /api/external/v1/dynamic-cases/UpdateComment | PUT | UpdateCaseComment | chronicle.googleapis.com/caseComments.update |
| dynamic-cases | /api/external/v1/dynamic-cases/GetWallActivitiesForCommandCenter/{id} | GET | - | - |
| dynamic-cases | /api/external/v1/dynamic-cases/AddEvidence | POST | CreateCaseComment | chronicle.googleapis.com/caseComments.update |
| dynamic-cases | /api/external/v1/dynamic-cases/AddOrUpdateEntityProperty | POST | AddInvolvedEntityProperty | chronicle.googleapis.com/involvedEntities.update |
| dynamic-cases | /api/external/v1/dynamic-cases/CreateCaseEntity | POST | CreateInvolvedEntity | chronicle.googleapis.com/involvedEntities.update |
| dynamic-cases | /api/external/v1/dynamic-cases/CreateCase | POST | CreateCase | chronicle.googleapis.com/legacyCases.ingest |
| dynamic-cases | /api/external/v1/dynamic-cases/request | POST | #N/A | #N/A |
| dynamic-cases | /api/external/v1/dynamic-cases/AddOrUpdateCaseTask | POST | CreateTask, UpdateTask | chronicle.googleapis.com/tasks.update, chronicle.googleapis.com/tasks.create |
| dynamic-cases | /api/external/v1/dynamic-cases/MarkTaskAsDone | POST | UpdateTask | chronicle.googleapis.com/tasks.update |
| entity-search | /api/external/v1/entity-search/count | POST | LegacyEntitySearchEverything | chronicle.googleapis.com/legacySearches.searchEntities |
| entity-search | /api/external/v1/entity-search/entities | POST | LegacyEntitySearchEverything | chronicle.googleapis.com/legacySearches.searchEntities |
| external-authentication-settings | /api/external/v1/external-authentication-settings | GET | - | - |
| external-authentication-settings | /api/external/v1/external-authentication-settings | POST | - | - |
| external-authentication-settings | /api/external/v1/external-authentication-settings/{id} | GET | - | - |
| external-authentication-settings | /api/external/v1/external-authentication-settings/{id} | DELETE | - | - |
| external-authentication-settings | /api/external/v1/external-authentication-settings/{id} | PATCH | - | - |
| external-authentication-settings | /api/external/v1/external-authentication-settings/{id} | PUT | - | - |
| federation | /api/external/v1/federation/platforms/{id} | DELETE | LegacyDeleteCaseFederationPlatform | chronicle.googleapis.com/legacyCaseFederationPlatforms.delete |
| federation | /api/external/v1/federation/platforms | GET | LegacyListCaseFederationPlatforms | chronicle.googleapis.com/legacyCaseFederationPlatforms.get |
| federation | /api/external/v1/federation/platforms | POST | CreateLegacyCaseFederationPlatform | chronicle.googleapis.com/legacyCaseFederationPlatforms.update |
| federation | /api/external/v1/federation/cases | GET | LegacyListFederatedCases | chronicle.googleapis.com/legacyFederatedCases.listFederatedCases |
| federation | /api/external/v1/federation/cases/batch-patch | PATCH | LegacyBatchPatchFederatedCases | chronicle.googleapis.com/legacyFederatedCases.batchPatchFederatedCases |
| homepage | /api/external/v1/homepage/rss | POST | CreateAnnouncement | chronicle.googleapis.com/announcements.update |
| homepage | /api/external/v1/homepage/rss | PUT | UpdateAnnouncement | chronicle.googleapis.com/announcements.update |
| homepage | /api/external/v1/homepage/rss/{id} | GET | GetAnnouncement | chronicle.googleapis.com/announcements.get |
| homepage | /api/external/v1/homepage/rss/{id} | DELETE | DeleteAnnouncement | chronicle.googleapis.com/announcements.delete |
| homepage | /api/external/v1/homepage/rss/GetByRequest | GET | ListAnnouncements | chronicle.googleapis.com/announcements.get |
| homepage | /api/external/v1/homepage/rss/GetRssCount | GET | ListAnnouncements | chronicle.googleapis.com/announcements.get |
| homepage | /api/external/v1/homepage/attachments | POST | CreateAttachment | chronicle.googleapis.com/attachments.update |
| homepage | /api/external/v1/homepage/attachments | PUT | - | #N/A |
| homepage | /api/external/v1/homepage/attachments/{id} | GET | GetAttachment | chronicle.googleapis.com/attachments.get |
| homepage | /api/external/v1/homepage/attachments/{id} | DELETE | DeleteAttachment | chronicle.googleapis.com/attachments.delete |
| homepage | /api/external/v1/homepage/attachments/GetByRequest | GET | ListAttachments | chronicle.googleapis.com/attachments.get |
| homepage | /api/external/v1/homepage/contacts | POST | CreateWorkdeskContact | chronicle.googleapis.com/workdeskContacts.update |
| homepage | /api/external/v1/homepage/contacts | PUT | UpdateWorkdeskContact | chronicle.googleapis.com/workdeskContacts.update |
| homepage | /api/external/v1/homepage/contacts/{id} | GET | GetWorkdeskContact | chronicle.googleapis.com/workdeskContacts.get |
| homepage | /api/external/v1/homepage/contacts/{id} | DELETE | DeleteWorkdeskContact | chronicle.googleapis.com/workdeskContacts.delete |
| homepage | /api/external/v1/homepage/contacts/GetByRequest | GET | ListWorkdeskContacts | chronicle.googleapis.com/workdeskContacts.get |
| homepage | /api/external/v1/homepage/links | POST | CreateWorkdeskLink | chronicle.googleapis.com/workdeskLinks.update |
| homepage | /api/external/v1/homepage/links | PUT | UpdateWorkdeskLink | chronicle.googleapis.com/workdeskLinks.update |
| homepage | /api/external/v1/homepage/links/{id} | GET | GetWorkdeskLink | chronicle.googleapis.com/workdeskLinks.get |
| homepage | /api/external/v1/homepage/links/{id} | DELETE | DeleteWorkdeskLink | chronicle.googleapis.com/workdeskLinks.delete |
| homepage | /api/external/v1/homepage/links/GetByRequest | GET | ListWorkdeskLinks | chronicle.googleapis.com/workdeskLinks.get |
| homepage | /api/external/v1/homepage/notes | POST | CreateWorkdeskNote | chronicle.googleapis.com/workdeskNotes.update |
| homepage | /api/external/v1/homepage/notes | PUT | UpdateWorkdeskNote | chronicle.googleapis.com/workdeskNotes.update |
| homepage | /api/external/v1/homepage/notes/{id} | GET | GetWorkdeskNote | chronicle.googleapis.com/workdeskNotes.get |
| homepage | /api/external/v1/homepage/notes/{id} | DELETE | DeleteWorkdeskNote | chronicle.googleapis.com/workdeskNotes.delete |
| homepage | /api/external/v1/homepage/notes/GetByRequest | GET | ListWorkdeskNotes | chronicle.googleapis.com/workdeskNotes.get |
| idp-group-mapping | /api/external/v1/idp-group-mapping | POST | CreateLegacySoarIdpMappingGroup | chronicle.googleapis.com/legacySoarIdpMappingGroups.update |
| idp-group-mapping | /api/external/v1/idp-group-mapping | GET | ListLegacySoarIdpMappingGroups | chronicle.googleapis.com/legacySoarIdpMappingGroups.get |
| idp-group-mapping | /api/external/v1/idp-group-mapping/{id} | GET | GetLegacySoarIdpMappingGroup | chronicle.googleapis.com/legacySoarIdpMappingGroups.get |
| idp-group-mapping | /api/external/v1/idp-group-mapping/{id} | PUT | UpdateLegacySoarIdpMappingGroup | chronicle.googleapis.com/legacySoarIdpMappingGroups.update |
| idp-group-mapping | /api/external/v1/idp-group-mapping/{id} | DELETE | DeleteLegacySoarIdpMappingGroup | chronicle.googleapis.com/legacySoarIdpMappingGroups.delete |
| idp-group-mapping | /api/external/v1/idp-group-mapping/count | GET | ListLegacySoarIdpMappingGroups | chronicle.googleapis.com/legacySoarIdpMappingGroups.get |
| integrations | /api/external/v1/integrations/GetAllEnvironmentCards | POST | - | #N/A |
| integrations | /api/external/v1/agents/integration-upgrade-unsupported-agents | GET | fetchRestrictedAgents | chronicle.googleapis.com/integrations.get |
| integrations | /api/external/v1/integrations/GetInstalledIntegrations | GET | ListIntegrations | chronicle.googleapis.com/integrations.get |
| integrations | /api/external/v1/integrations/GetEnvironmentInstalledIntegrations | POST | ListIntegrations | chronicle.googleapis.com/integrations.get |
| integrations | /api/external/v1/integrations/CreateIntegrationInstance | POST | CreateIntegrationInstance | chronicle.googleapis.com/integrationInstances.update |
| integrations | /api/external/v1/integrations/DeleteIntegrationInstance | POST | DeleteIntegrationInstance | chronicle.googleapis.com/integrationInstances.delete |
| integrations | /api/external/v1/integrations/GetOptionalIntegrationInstances | POST | ListIntegrationInstance | chronicle.googleapis.com/integrationInstances.get |
| integrations | /api/external/v1/integrations/GetIntegrationDefaultInstance/{integrationIdentifier} | GET | FetchDefaultIntegrationInstance | chronicle.googleapis.com/integrationInstances.get |
| integrations | /api/external/v1/integrations/GetIntegrationInstanceSettings/{integrationInstanceId} | GET | GetIntegrationInstance | chronicle.googleapis.com/integrationInstances.get |
| integrations | /api/external/v1/integrations/GetPlaybooksNamesUsingIntegrationInstance/{integrationInstanceId} | GET | fetchAffectedItems | chronicle.googleapis.com/integrations.get |
| jobs | /api/external/v1/jobs/GetInstalledJobs | GET | ListIntegrationJobs | chronicle.googleapis.com/jobs.get |
| jobs | /api/external/v1/jobs/GetJobTemplates | GET | FetchIntegrationJobTemplate | chronicle.googleapis.com/jobs.get |
| jobs | /api/external/v1/jobs/instances | POST | CreateIntegrationJobInstance | chronicle.googleapis.com/jobInstances.update |
| jobs | /api/external/v1/jobs/instances | PUT | UpdateIntegrationJobInstance | chronicle.googleapis.com/jobInstances.update |
| jobs | /api/external/v1/jobs/instances | GET | GetIntegrationJobInstance | chronicle.googleapis.com/jobInstances.get |
| jobs | /api/external/v1/jobs/instances/{id} | DELETE | DeleteIntegrationJobInstance | chronicle.googleapis.com/jobInstances.delete |
| jobs | /api/external/v1/jobs/SaveOrUpdateJobData | POST | CreateIntegrationJobInstance | chronicle.googleapis.com/jobInstances.update |
| jobs | /api/external/v1/jobs/DeleteJobData | POST | DeleteIntegrationJobInstance | chronicle.googleapis.com/jobInstances.delete |
| jobs | /api/external/v1/jobs/instances/run | POST | RunOnDemandIntegrationJobInstance | chronicle.googleapis.com/jobInstances.run |
| jobs | /api/external/v1/jobs/RunJob | POST | RunOnDemandIntegrationJobInstance | chronicle.googleapis.com/jobInstances.run |
| logging | /api/external/v1/logging/python | POST | #N/A | #N/A |
| notifications | /api/external/v1/notifications/CloseAllNotifications | GET | MarkAsRead, MarkUserNotificationAsRead | chronicle.googleapis.com/systemNotifications.update |
| notifications | /api/external/v1/notifications/CloseSystemNotification/{recordId} | GET | MarkAsRead | chronicle.googleapis.com/systemNotifications.update |
| notifications | /api/external/v1/notifications/CloseUserNotification/{recordId} | GET | MarkUserNotificationAsRead | chronicle.googleapis.com/userNotifications.update |
| notifications | /api/external/v1/notifications/GetUnreadNotificationCount | GET | CountSystemNotifications, MarkUserNotificationAsRead | chronicle.googleapis.com/systemNotifications.get, chronicle.googleapis.com/userNotifications.update |
| notifications | /api/external/v1/notifications/GetUserNotifications | GET | ListUserNotifications | chronicle.googleapis.com/userNotifications.get |
| notifications | /api/external/v1/notifications/GetUserNotificationSettings | GET | GetNotificationSettings | chronicle.googleapis.com/notificationSettings.get |
| notifications | /api/external/v1/notifications/SaveUserNotificationSettings | POST | UpdateNotificationSettings | chronicle.googleapis.com/notificationSettings.update |
| ontology | /api/external/v1/ontology/DuplicateVisualFamilyForSettings | POST | CreateVisualFamily | #N/A |
| ontology | /api/external/v1/ontology/AddOrUpdateMappingRules | POST | UpdateMappingRule | chronicle.googleapis.com/mappingRules.update |
| ontology | /api/external/v1/ontology/DeleteMappingRule | POST | DeleteMappingRule | chronicle.googleapis.com/mappingRules.delete |
| ontology | /api/external/v1/ontology/GetMappingRules | POST | ListMappingRules | chronicle.googleapis.com/mappingRules.get |
| ontology | /api/external/v1/ontology/GetRelatedEntitiesByFamilyName/{familyName} | GET | #N/A | #N/A |
| ontology | /api/external/v1/ontology/AddOrUpdateVisualFamily | POST | CreateVisualFamily, UpdateVisualFamily | #N/A |
| ontology | /api/external/v1/ontology/AddOrUpdateVisualFamilyRules | POST | UpdateVisualFamily | chronicle.googleapis.com/mappingRules.update |
| ontology | /api/external/v1/ontology/DeleteFamilyData/{familyId} | GET | DeleteVisualFamily | #N/A |
| ontology | /api/external/v1/ontology/DeleteVisualFamilyRule | POST | DeleteVisualFamily | #N/A |
| ontology | /api/external/v1/ontology/ExportVisualFamily | POST | ExportVisualFamilies | chronicle.googleapis.com/visualFamilies.get |
| ontology | /api/external/v1/ontology/GetFamily | POST | GetVisualFamily | chronicle.googleapis.com/visualFamilies.get |
| ontology | /api/external/v1/ontology/GetVisualFamilies | GET | ListVisualFamilies | chronicle.googleapis.com/visualFamilies.get |
| ontology | /api/external/v1/ontology/ImportOntology | POST | #N/A | #N/A |
| ontology | /api/external/v1/ontology/ImportVisualFamily | POST | #N/A | #N/A |
| ontology | /api/external/v1/ontology/IsOntologyOrVisualFamilyExists | POST | ListOntologyRecords | #N/A |
| ontology | /api/external/v1/ontology/IsVisualFamilyExists | POST | ListVisualFamilies | #N/A |
| ontology | /api/external/v1/ontology/UpdateVisualFamilyImage | POST | UpdateVisualFamily | #N/A |
| ontology | /api/external/v1/ontology/ExportOntology | POST | #N/A | #N/A |
| permissions | /api/external/v1/permissions | POST | #N/A | #N/A |
| permissions | /api/external/v1/permissions | PUT | #N/A | #N/A |
| permissions | /api/external/v1/permissions/{id} | GET | #N/A | #N/A |
| permissions | /api/external/v1/permissions/{id} | DELETE | #N/A | #N/A |
| permissions | /api/external/v1/permissions/Duplicate/{id} | POST | #N/A | #N/A |
| permissions | /api/external/v1/permissions/GetAllEnvironmentStatus | GET | #N/A | #N/A |
| permissions | /api/external/v1/permissions/GetAllEnvironmentStatus/{permissionGroupId} | GET | #N/A | #N/A |
| permissions | /api/external/v1/permissions/GetPermissionsGroupCards | GET | #N/A | #N/A |
| permissions | /api/external/v1/permissions/GetPermissionsGroupTemplateByType/{permissionType} | GET | #N/A | #N/A |
| permissions | /api/external/v1/permissions/GetPermissionsGroupTypes | GET | #N/A | #N/A |
| playbooks | /api/external/v1/playbooks/GetContextGroupByKey/{key} | GET | LegacyPlaybookGetContextGroupByKey | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetTestCases | POST | - | #N/A |
| playbooks | /api/external/v1/playbooks/GetCaseEntities/{caseId} | GET | LegacyPlaybookGetCaseEntities | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/CloneWorkflow | POST | LegacyPlaybookCloneWorkflow | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/DuplicateWorkflow | POST | LegacyPlaybookDuplicateWorkflow | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/GetEnabledWFNames | GET | LegacyPlaybookGetEnabledWorkflowNames | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetNestedPlaybookParams/{workflowIdentifier} | GET | LegacyPlaybookGetNestedPlaybookParams | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetNestedPlaybooksAsSteps | GET | LegacyPlaybookGetNestedPlaybooksAsSteps | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetTriggerTags | POST | LegacyPlaybookGetTriggerTags | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowsContainsActionAsync | GET | LegacyPlaybookGetWorkflowsContainsActionAsync | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/ImportWorkflowWithNestedBlocks | POST | LegacyPlaybookImportDefinitions | chronicle.googleapis.com/legacyPlaybooks.import |
| playbooks | /api/external/v1/playbooks/KeepAlive | GET | #N/A | #N/A |
| playbooks | /api/external/v1/playbooks/permissions/KeepAlive | GET | #N/A | #N/A |
| playbooks | /api/external/v1/playbooks/action-widget-template | GET | LegacyPlaybookActionWidgetTemplate | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/AddOrUpdatePlaybookCategory | POST | LegacyPlaybookAddOrUpdatePlaybookCategory | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/AttacheNestedWorkflowToCase | POST | LegacyPlaybookAttachNestedWorkflowToCase | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/AttacheWorkflowToCase | POST | LegacyPlaybookAttachWorkflowToCase | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/CheckWorkflowNameInDifferentEnvironments | POST | LegacyPlaybookCheckWorkflowNameInDifferentEnvironments | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/DeleteWorkflow | POST | LegacyPlaybookDeleteWorkflow | chronicle.googleapis.com/legacyPlaybooks.delete |
| playbooks | /api/external/v1/playbooks/DeleteWorkflows | POST | LegacyPlaybookDeleteWorkflows | chronicle.googleapis.com/legacyPlaybooks.delete |
| playbooks | /api/external/v1/playbooks/DuplicateNestedWorkflows | POST | LegacyPlaybookDuplicateNestedWorkflows | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/DuplicateWorkflows | POST | LegacyPlaybookDuplicateWorkflows | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/ExecuteStep | POST | LegacyPlaybookExecuteStep | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/ExportDefinitions | POST | LegacyPlaybookExportDefinitions | chronicle.googleapis.com/legacyPlaybooks.export |
| playbooks | /api/external/v1/playbooks/ExportWorkflowWithBlocksByIdentifier/{apiWfIdentifier} | GET | LegacyPlaybookExportDefinitions | chronicle.googleapis.com/legacyPlaybooks.export |
| playbooks | /api/external/v1/playbooks/GetActionResultsOfWFId/{wfInstanceId} | GET | LegacyPlaybookGetActionResultsOfWFId | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetDebugStepCaseData | POST | LegacyPlaybookGetDebugStepCaseData | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetEnabledWFCards | POST | LegacyPlaybookGetEnabledWFCards | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/store/GetHtmlViewPresets | GET | LegacyPlaybookGetHtmlViewPresets | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetNestedPlaybooksByEnvironmentsAsSteps | POST | LegacyPlaybookGetNestedPlaybooksByEnvironmentsAsSteps | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetNestedWorkflowDefaultInputs | POST | LegacyPlaybookGetNestedWorkflowDefaultInputs | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetOverviewTemplate | POST | LegacyPlaybookGetOverviewTemplate | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetOverviewTemplate/{templateIdentifier} | GET | LegacyPlaybookGetOverviewTemplateByPlaybookIdentifier | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetPendingStep | POST | LegacyPlaybookGetPendingStep | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetPendingStepsCountForUser | GET | LegacyPlaybookGetPendingStepsCountForUser | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetPendingStepsUserRelated | GET | LegacyPlaybookGetPendingStepsUserRelated | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetPlaybookSimulationEnrichment | POST | LegacyPlaybookGetPlaybookSimulationEnrichment | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetPlaybookStatsMap | POST | LegacyPlaybookGetPlaybookStatsMap | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetPlaybooksUsingBlocks | POST | LegacyPlaybookGetPlaybooksUsingBlocks | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowCategories | GET | LegacyPlaybookGetWorkflowCategories | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowFullInfoByIdentifier/{apiWfIdentifier} | GET | LegacyPlaybookGetWorkflowFullInfoByIdentifier | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowFullInfoWithEnvFilterByIdentifier/{apiWfIdentifier} | GET | LegacyPlaybookGetWorkflowFullInfoWithEnvFilterByIdentifier | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowMenuCard/{apiWfIdentifier} | GET | LegacyPlaybookGetWorkflowMenuCard | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowMenuCards | POST | LegacyPlaybookGetWorkflowMenuCards | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowMenuCardsWithEnvFilter | POST | LegacyPlaybookGetWorkflowMenuCardsWithEnvFilter | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowMenuCardWithEnvFilter/{apiWfIdentifier} | GET | LegacyPlaybookGetWorkflowMenuCardWithEnvFilter | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowsInvolvingAction | POST | LegacyPlaybookGetWorkflowsInvolvingAction | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkflowStepInstance | POST | LegacyPlaybookGetWorkflowStepInstance | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/GetWorkFlowVersionLogs | POST | LegacyPlaybookGetWorkFlowVersionLogs | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/ImportDefinitions | POST | LegacyPlaybookImportDefinitions | chronicle.googleapis.com/legacyPlaybooks.import |
| playbooks | /api/external/v1/playbooks/MoveDefinitionsToCategory | POST | LegacyPlaybookMoveDefinitionsToCategory | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/permissions | POST | LegacyPlaybookPermissions | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/permissions/{identifier} | DELETE | LegacyPlaybookDeletePermissions | chronicle.googleapis.com/legacyPlaybooks.delete |
| playbooks | /api/external/v1/playbooks/permissions/options | POST | LegacyPlaybookPermissionsOptions | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/RemoveCategories | POST | LegacyPlaybookRemoveCategories | chronicle.googleapis.com/legacyPlaybooks.delete |
| playbooks | /api/external/v1/playbooks/RerunBlock | POST | LegacyPlaybookRerunBlock | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/RerunPlaybook | POST | LegacyPlaybookRerunPlaybook | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/RestoreWorkflowDefinition | POST | LegacyPlaybookRestoreWorkflowDefinition | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/RunPlaybookInDebug | POST | LegacyPlaybookRunPlaybookInDebug | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/SaveLogVersionOfWorkflowDefinitions | POST | LegacyPlaybookSaveLogVersionOfWorkflowDefinitions | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/SaveWorkflowDefinitions | POST | LegacyPlaybookSaveWorkflowDefinitions | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | /api/external/v1/playbooks/TestPipeExample | POST | LegacyPlaybookTestPipeExample | chronicle.googleapis.com/legacyPlaybooks.get |
| playbooks | /api/external/v1/playbooks/UpdateDefinitionsPriority | POST | LegacyPlaybookUpdateDefinitionsPriority | chronicle.googleapis.com/legacyPlaybooks.update |
| playbooks | Get All Playbooks | playbooks |
playbooks.list |
|
| playbooks | Get Playbook by ID | playbooks/{id} |
playbooks.get |
|
| playbooks | Create Playbook | playbooks |
playbooks.create |
|
| store | Get Marketplace Items | marketplace/items |
marketplace.items.list |
|
| store | Install Integration | marketplace/integrations:install |
marketplace.integrations.install |
|
| store | /api/external/v1/store/GetReportsStoreData | GET | #N/A | #N/A |
| store | /api/external/v1/store/ReinstallAllIntegrations | POST | #N/A | #N/A |
| store | /api/external/v1/store/GetIntegrationDependencies/{integrationIdentifier} | GET | GetMarketplaceIntegration | chronicle.googleapis.com/marketplaceIntegrations.get |
| store | /api/external/v1/store/SaveIntegrationConfigurationProperties | POST | #N/A | #N/A |
| store | /api/external/v1/store/TestIntegration/{integrationInstanceId} | GET | #N/A | #N/A |
| store | /api/external/v1/store/GetUsecasesCards | GET | ListContentPacks | chronicle.googleapis.com/contentPacks.get |
| store | /api/external/v1/store/ExportUseCase | POST | ExportContentPack | chronicle.googleapis.com/contentPacks.export |
| store | /api/external/v1/store/GetIntegrationsStoreData | GET | ListMarketplaceIntegrations | chronicle.googleapis.com/marketplaceIntegrations.get |
| store | /api/external/v1/store/GetPowerUpsStoreData | GET | ListMarketplaceIntegrations | chronicle.googleapis.com/marketplaceIntegrations.get |
| store | /api/external/v1/store/GetIntegrationFullDetails | POST | GetMarketplaceIntegration | chronicle.googleapis.com/marketplaceIntegrations.get |
| reports | List Reports | reports |
reports.list |
|
| reports | /api/external/v1/reports/KeepAlive | GET | #N/A | #N/A |
| reports | /api/external/v1/reports/AddOrUpdateReportSchedule | POST | LegacyAddOrUpdateReportSchedule | chronicle.googleapis.com/legacySoarReports.update |
| reports | /api/external/v1/reports/AddOrUpdateReportTemplate | POST | LegacyAddOrUpdateReportTemplate | chronicle.googleapis.com/legacySoarReports.update |
| reports | /api/external/v1/reports/AddOrUpdateReportWidget | POST | LegacyAddOrUpdateReportWidget | chronicle.googleapis.com/legacySoarReports.update |
| reports | /api/external/v1/reports/DeleteReportSchedule/{id} | GET | LegacyDeleteReportSchedule | chronicle.googleapis.com/legacySoarReports.delete |
| reports | /api/external/v1/reports/DuplicateReportTemplate | POST | LegacyDuplicateReportTemplate | chronicle.googleapis.com/legacySoarReports.update |
| reports | /api/external/v1/reports/GenerateReportTemplate | POST | LegacyGenerateReportTemplate | chronicle.googleapis.com/legacySoarReports.get |
| reports | /api/external/v1/reports/GetAdvancedReports | GET | LegacyGetAdvancedReports | chronicle.googleapis.com/legacySoarReports.get |
| reports | /api/external/v1/reports/GetReportSchedules | POST | LegacyGetReportSchedules | chronicle.googleapis.com/legacySoarReports.get |
| reports | /api/external/v1/reports/GetReportTemplates | GET | LegacyGetReportTemplates | chronicle.googleapis.com/legacySoarReports.get |
| reports | /api/external/v1/reports/ImportReportTemplate | POST | LegacyImportReportTemplate | chronicle.googleapis.com/legacySoarReports.update |
| reports | /api/external/v1/reports/RefreshAdvancedReports | GET | LegacyRefreshAdvancedReports | chronicle.googleapis.com/legacySoarReports.get |
| reports | /api/external/v1/reports/RemoveReportTemplate/{templateId} | GET | LegacyRemoveReportTemplate | chronicle.googleapis.com/legacySoarReports.delete |
| reports | /api/external/v1/reports/RemoveReportWidget/{widgetId} | GET | LegacyRemoveReportWidget | chronicle.googleapis.com/legacySoarReports.delete |
| reports | /api/external/v1/reports/ShareAdvancedReport | POST | LegacyShareAdvancedReport | chronicle.googleapis.com/legacySoarReports.update |
| reports | /api/external/v1/reports/UploadAdvancedReport | POST | LegacyUploadAdvancedReport | chronicle.googleapis.com/legacySoarReports.update |
| pubsubbackfill | /api/external/v1/{tenant_id}/pubsub-backfill:trigger | POST | #N/A | #N/A |
| resources | /api/external/v1/resources/GetActionResultsById/{caseId}/{actionResultId} | GET | #N/A | #N/A |
| resources | /api/external/v1/resources/GetEntityInsightsById/{caseId}/{insightsId} | GET | #N/A | #N/A |
| resources | /api/external/v1/resources/DownloadAuditControllerActionsCsv | GET | #N/A | #N/A |
| resources | /api/external/v1/resources/GetCaseFullDetailsById/{parentId}/{caseId} | GET | #N/A | #N/A |
| retention | /api/external/v1/retention/system | POST | #N/A | #N/A |
| retention | /api/external/v1/retention/user | POST | #N/A | #N/A |
| retention | /api/external/v1/retention/delete-case | POST | #N/A | #N/A |
| search | /api/external/v1/search/GetSearchResultsAsCsv | POST | LegacyGetSearchResultsAsCsv | chronicle.googleapis.com/legacySearches.searchCases |
| search | /api/external/v1/search/CaseSearchEverything | POST | LegacyCaseSearchEverything | chronicle.googleapis.com/legacySearches.searchCases |
| search | /api/external/v1/search/EntitySearchEverything | POST | LegacyEntitySearchEverything | chronicle.googleapis.com/legacySearches.searchEntities |
| search | /api/external/v1/search/GetCasesFilterUserAndRoles | POST | LegacyGetCasesFilterUserAndRoles | chronicle.googleapis.com/legacySearches.searchCases |
| search | /api/external/v1/search/GetCasesFilterValues | POST | LegacyGetCasesFilterValues | chronicle.googleapis.com/legacySearches.searchCases |
| search | /api/external/v1/search/GetEntitiesFilterValues | POST | LegacyGetEntitiesFilterValues | chronicle.googleapis.com/legacySearches.searchEntities |
| search | Execute Search | search:execute |
search.execute |
|
| settings | /api/external/v1/settings/environment-priorities | GET | ResetWeights | chronicle.googleapis.com/environments.update |
| settings | /api/external/v1/settings/environment-priorities/{environment} | PATCH | UpdateEnvironment | chronicle.googleapis.com/environments.update |
| settings | /api/external/v1/settings/environment-priorities/{environment} | GET | GetEnvironment | chronicle.googleapis.com/environments.get |
| settings | /api/external/v1/settings/CreateAlertGroupingRule | POST | CreateAlertGroupingRule | chronicle.googleapis.com/alertGroupingRules.update |
| settings | /api/external/v1/settings/GetAlertGroupingRules | POST | ListAlertGroupingRules | chronicle.googleapis.com/alertGroupingRules.get |
| settings | /api/external/v1/settings/RemoveAlertGroupingRule | POST | DeleteAlertGroupingRule | chronicle.googleapis.com/alertGroupingRules.delete |
| settings | /api/external/v1/settings/UpdateAlertGroupingRule | POST | UpdateAlertGroupingRule | chronicle.googleapis.com/alertGroupingRules.update |
| settings | /api/external/v1/settings/AddCaseStageDefinitionRecord | POST | CreateCaseStageDefinition | chronicle.googleapis.com/caseStageDefinitions.update |
| settings | /api/external/v1/settings/GetCaseStageDefinitionRecords | POST | ListCaseStageDefinitions | chronicle.googleapis.com/caseStageDefinitions.get |
| settings | /api/external/v1/settings/RemoveCaseStageDefinitionRecords | POST | DeleteCaseStageDefinition | chronicle.googleapis.com/caseStageDefinitions.delete |
| settings | /api/external/v1/settings/AddTagDefinitionsRecords | POST | CreateCaseTagDefinition | chronicle.googleapis.com/caseTagDefinitions.update |
| settings | /api/external/v1/settings/AddLicenseAgreementSignature | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/ExportAuditLastWeekAsCsv | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/GetAllModelBlockRecords | GET | ListEntitiesBlocklists | chronicle.googleapis.com/entitiesBlocklists.get |
| settings | /api/external/v1/settings/GetAnalysts | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/GetAuditData | POST | LegacyGetAuditDataV2 | chronicle.googleapis.com/legacySoarAudits.legacySoarAudit |
| settings | /api/external/v1/settings/GetEnvironmentInstanceUrls | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/GetLatestLicenseAgreement | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/GetMoveCaseBetweenEnvironmentsPolicySettings | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/GetProxySettings | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/GetPublicCertificate | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/GetSystemVersion | GET | LegacyGetSystemVersion | chronicle.googleapis.com/legacySystem.getSystemVersion |
| settings | /api/external/v1/settings/networks/permitted | DELETE | DeleteSoarNetwork | chronicle.googleapis.com/soarNetworks.delete |
| settings | /api/external/v1/settings/TestAdvancedReportsSettings | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/TestProxySettings | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/form-dynamic-parameters | GET | ListFormDynamicParameters | chronicle.googleapis.com/formDynamicParameters.get |
| settings | /api/external/v1/settings/form-dynamic-parameters/{id} | GET | GetFormDynamicParameter | chronicle.googleapis.com/formDynamicParameters.get |
| settings | /api/external/v1/settings/form-dynamic-parameters/{id} | PUT | SaveFormDynamicParameters | chronicle.googleapis.com/formDynamicParameters.update |
| settings | /api/external/v1/settings/GetEnvironments | POST | ListEnvironments | chronicle.googleapis.com/environments.get |
| settings | /api/external/v1/settings/ExportAuditLastWeekAsCsvV2 | POST | LegacyExportAuditLastWeekAsCsvV2 | chronicle.googleapis.com/legacySoarAudits.legacySoarAudit |
| settings | /api/external/v1/settings/SaveAdvancedReportsSettings | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/tag-definition/names | GET | ListCaseTagDefinitions | chronicle.googleapis.com/caseTagDefinitions.get |
| settings | /api/external/v1/settings/UploadCustomActionResultJson | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/GetNetworkDetails | POST | GetSoarNetwork | chronicle.googleapis.com/soarNetworks.get |
| settings | /api/external/v1/settings/GetTrackingListRecords | GET | ListCustomLists | chronicle.googleapis.com/customLists.get |
| settings | /api/external/v1/settings/GetTrackingListRecordsFiltered | POST | ListCustomLists | chronicle.googleapis.com/customLists.get |
| settings | /api/external/v1/settings/batch-delete-custom-lists | POST | BatchDeleteCustomLists | chronicle.googleapis.com/customLists.delete |
| settings | /api/external/v1/settings/AddOrUpdateTrackingListRecords | POST + PATCH | CreateCustomList | chronicle.googleapis.com/customLists.update |
| settings | /api/external/v1/settings/RemoveTrackingListRecords | DELETE | DeleteCustomList | chronicle.googleapis.com/customLists.delete |
| settings | /api/external/v1/settings/GetSlaDefinitions | POST | ListSlaDefinitions | chronicle.googleapis.com/slaDefinitions.get |
| settings | /api/external/v1/settings/GetSlaDefinitionsRecords | GET | ListSlaDefinitions | chronicle.googleapis.com/slaDefinitions.get |
| settings | /api/external/v1/settings/GetBlockListDetails | POST | GetEntitiesBlocklist | chronicle.googleapis.com/entitiesBlocklists.get |
| settings | /api/external/v1/settings/RemoveModelBlockRecords | POST | DeleteEntitiesBlocklist | chronicle.googleapis.com/entitiesBlocklists.delete |
| settings | /api/external/v1/settings/GetSystemEventEntityTypes | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/AddOrUpdateUserProfile | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/AddOrUpdateRootCauseClose | POST | CreateCaseCloseDefinition | chronicle.googleapis.com/caseCloseDefinitions.update |
| settings | /api/external/v1/settings/GetRootCauseCloseRecords | GET | GetCaseCloseDefinition | chronicle.googleapis.com/caseCloseDefinitions.get |
| settings | /api/external/v1/settings/RemoveRootCauseClose | POST | DeleteCaseCloseDefinition | chronicle.googleapis.com/caseCloseDefinitions.delete |
| settings | /api/external/v1/settings/RemoveSlaDefinitionRecords | POST | DeleteSlaDefinition | chronicle.googleapis.com/slaDefinitions.delete |
| settings | /api/external/v1/settings/RemoveTagDefinitionRecords | POST | DeleteCaseTagDefinition | chronicle.googleapis.com/caseTagDefinitions.delete |
| settings | /api/external/v1/settings/AddOrUpdateEnvironmentRecords | POST | CreateEnvironment | chronicle.googleapis.com/environments.update |
| settings | /api/external/v1/settings/RemoveEnvironmentRecords | POST | DeleteEnvironment | chronicle.googleapis.com/environments.delete |
| settings | /api/external/v1/settings/AddOrUpdateCaseAssignmentPolicySettings | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/AddOrUpdateMoveCaseBetweenEnvironmentsPolicySettings | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/GetAdvancedReportsSettings | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/GetCaseAssigmentPolicySettings | GET | #N/A | #N/A |
| settings | /api/external/v1/settings/AddOrUpdateNetworkDetailsRecords | POST | CreateSoarNetwork/UpdateSoarNetwork | #N/A |
| settings | /api/external/v1/settings/networks/{identifier} | DELETE | DeleteSoarNetwork | chronicle.googleapis.com/soarNetworks.delete |
| settings | /api/external/v1/settings/RemoveNetworkDetailsRecords | POST | DeleteSoarNetwork | chronicle.googleapis.com/soarNetworks.delete |
| settings | /api/external/v1/settings/RemoveAllNetworkDetailsRecords | POST | DeleteSoarNetwork | chronicle.googleapis.com/soarNetworks.delete |
| settings | /api/external/v1/settings/AddCollaboratorRequest | POST | CreateRequestTemplate | chronicle.googleapis.com/requestTemplates.update |
| settings | /api/external/v1/settings/DeleteCollaboratorRequest/{id} | DELETE | DeleteRequestTemplate | chronicle.googleapis.com/requestTemplates.delete |
| settings | /api/external/v1/settings/GetAllCollaboratorRequests | GET | ListRequestTemplates | chronicle.googleapis.com/requestTemplates.get |
| settings | /api/external/v1/settings/GetCollaboratorRequestsByUser | GET | ListRequestTemplates | chronicle.googleapis.com/requestTemplates.get |
| settings | /api/external/v1/settings/UpdateCollaboratorRequest | PUT | UpdateRequestTemplate | chronicle.googleapis.com/requestTemplates.update |
| settings | /api/external/v1/settings/AddSlaDefinitionsRecord | POST | CreateSlaDefinition | chronicle.googleapis.com/slaDefinitions.update |
| settings | /api/external/v1/settings/AddOrUpdateModelBlockRecords | POST | CreateEntitiesBlocklist | chronicle.googleapis.com/entitiesBlocklists.update |
| settings | /api/external/v1/settings/GetTagDefinitionsRecords | POST | GetCaseTagDefinition | chronicle.googleapis.com/caseTagDefinitions.get |
| settings | /api/external/v1/settings/GetUserImage | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/GetUserProfileCards | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/GetUserProfiles | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/GetUserProfilesByEnvironments | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/UpdateUserImage | POST | #N/A | #N/A |
| settings | /api/external/v1/settings/GetMaximumAlertsGroupingConfiguration | GET | LegacyGetMaximumAlertsGroupingConfig | chronicle.googleapis.com/legacyConfiguration.getMaximumAlertsGroupingConfiguration |
| settings | /api/external/v1/settings/IsPermittedToEnvironment/{environmentName} | GET | #N/A | #N/A |
| settings | Get Environments | settings/environments |
settings.environments.list |
|
| socroles | /api/external/v1/socroles/AddOrUpdateSocRole | POST | CreateSocRole | chronicle.googleapis.com/socRoles.update |
| socroles | /api/external/v1/socroles/DeleteSocRole | POST | DeleteSocRole | chronicle.googleapis.com/socRoles.delete |
| socroles | /api/external/v1/socroles/GetSocRole/{id} | GET | GetSocRole | chronicle.googleapis.com/socRoles.get |
| socroles | /api/external/v1/socroles/GetSocRoles | GET | ListSocRoles | chronicle.googleapis.com/socRoles.get |
| socroles | /api/external/v1/socroles/GetSocRolesByEnvironments | POST | ListSocRoles | chronicle.googleapis.com/socRoles.get |
| socroles | /api/external/v1/socroles/HasAssignedUsers/{id} | GET | GetSocRole | chronicle.googleapis.com/socRoles.get |
| soc roles | List Roles | auth/roles |
auth.roles.list |
|
| webhooks-management | /api/external/v1/webhooks-management | POST | UpdateWebhook | chronicle.googleapis.com/webhooks.update |
| webhooks-management | /api/external/v1/webhooks-management | PUT | CreateWebhook | chronicle.googleapis.com/webhooks.update |
| webhooks-management | /api/external/v1/webhooks-management/{identifier} | GET | GetWebhook | chronicle.googleapis.com/webhooks.get |
| webhooks-management | /api/external/v1/webhooks-management/{identifier} | DELETE | DeleteWebhook | chronicle.googleapis.com/webhooks.delete |
| webhooks-management | /api/external/v1/webhooks-management/{identifier}/statistics | GET | GetWebhookStats | chronicle.googleapis.com/webhooks.get |
| webhooks-management | /api/external/v1/webhooks-management/Cards | GET | ListWebhooks | chronicle.googleapis.com/webhooks.get |
| webhooks-management | /api/external/v1/webhooks-management/Revoke/{identifier} | POST | RevokeUrl | chronicle.googleapis.com/webhooks.update |
| webhooks-management | /api/external/v1/webhooks-management/Logs | GET | GetWebhookLogs | chronicle.googleapis.com/webhooks.get |
| webhooks-management | /api/external/v1/webhooks-management/ExportLogs/{identifier} | GET | ExportWebhookLogs | chronicle.googleapis.com/webhooks.get |
| webhooks | List Webhooks | webhooks |
webhooks.list |
Need more help? Get answers from Community members and Google SecOps professionals.