v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Security Attack discovery API

Get a single Attack Discovery generation, including its discoveries and (optional) generation metadata

Spaces method and path for this operation:

<div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/attack_discovery/generations/{execution_uuid}</span></div>

Refer to Spaces for more information.

Returns a specific Attack Discovery generation, including all generated Attack discoveries and associated metadata, including execution status and statistics.

get/api/attack_discovery/generations/{execution_uuid}

Path parameters

execution_uuidstring nonempty required

A string that does not contain only whitespace characters.

Example:I am a string

The unique identifier for the Attack Discovery generation execution. This UUID is returned at the start of an Attack Discovery generation.

Query parameters

enable_field_renderingboolean

Enables a markdown syntax used to render pivot fields, for example {{ user.name james }}. When disabled, the same example would be rendered as james. This is primarily used for Attack Discovery views within Kibana. Defaults to false.

with_replacementsboolean

When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to true.

Response

Indicates a successful call.

Example response

{
  "data": [
    {
      "timestamp": "2023-10-31T12:00:00Z",
      "users": [
        {
          "id": "user123",
          "name": "John Doe"
        }
      ]
    }
  ]
}