v1

latestOpenAPI 3.0.02026-07-141,4077,1665.2 MB

CSM Threats

Get all Workload Protection agent rules (US1-FED)

Get the list of agent rules.

Note: This endpoint should only be used for the Government (US1-FED) site.

get/api/v2/security_monitoring/cloud_workload_security/agent_rules

Response

Example response

{
  "data": [
    {
      "attributes": {
        "category": "Process Activity",
        "creationAuthorUuId": "e51c9744-d158-11ec-ad23-da7ad0900002",
        "creationDate": 1624366480320,
        "creator": {
          "handle": "datadog.user@example.com",
          "name": "Datadog User"
        },
        "description": "My Agent rule",
        "enabled": true,
        "expression": "exec.file.name == \"sh\"",
        "name": "my_agent_rule",
        "updateAuthorUuId": "e51c9744-d158-11ec-ad23-da7ad0900002",
        "updateDate": 1624366480320,
        "updatedAt": 1624366480320,
        "updater": {
          "handle": "datadog.user@example.com",
          "name": "Datadog User"
        },
        "version": 23
      },
      "id": "3dd-0uc-h1s",
      "type": "agent_rule"
    }
  ]
}