--- title: "Get Summary Report" method: GET path: "/v1/accounts/{account_id}/reports/{id}" tags: ["Reseller"] --- # Get Summary Report `GET /v1/accounts/{account_id}/reports/{id}` Shows details on a single Summary Report associated with your account. ## Path parameters - `account_id` integer, required - `id` integer, required ## Response `200` Get Summary Report - object - `report` SummaryReport — SummaryReport model - `id` integer — A unique identifier for the summary report. - `agents_count` integer — The number of agents deployed. - `allowed_exclusions_count` integer — The number of allowed exclusions. - `analyst_name` string — The name of the analyst who reviewed this report. - `analyst_note` string — The analyst note for this report. - `analyst_threats` string[] — Global threat landscape information curated by the analyst. - `analyst_title` string — The title of the analyst who reviewed this report. - `antivirus_exclusions_count` integer — The number of antivirus exclusions. - `autorun_events` integer — The total number of autorun (auto-starting application) events in this report. - `autorun_signals_detected` integer — The total number of autorun (auto-starting application) signals detected - `autorun_signals_reviewed` integer — The number of autorun signals (auto-starting application) reviewed. - `autoruns_reviewed` integer — A count of all the autoruns (auto-starting application) reviewed. - `blocked_malware_count` integer — A count of blocked malware. - `created_at` string, date-time — ISO-8601 formatted timestamp for when this summary report was created. - `deployed_canaries_count` integer — The number of canaries deployed. - `events_analyzed` integer — A count of the events analyzed. - `external_ips_count` integer — The number of external IP addresses discovered. - `external_ports_count` integer — The number of external ports discovered. - `external_services` ReportExternalService[] — Details of external services discovered during reconnaissance. - `name` string — The name of the external service. - `risky` boolean — Whether this service is considered risky. - `firewall_disabled_count` integer — The number of endpoints with firewall disabled. - `firewall_disabled_with_conflict_count` integer — The number of endpoints with firewall disabled due to a conflict. - `firewall_enabled_count` integer — The number of endpoints with firewall enabled. - `firewall_enabled_with_conflict_count` integer — The number of endpoints with firewall enabled but with a conflict. - `global_threats_note` string — The global threats note for this report. - `host_processes_analyzed` integer — A count of host processes analyzed. - `incident_indicator_counts` unknown - `incident_log` string[] — A JSON representation of any critical or high severity incidents from this report. - `incident_product_counts` unknown - `incident_severity_counts` unknown - `incidents_reported` integer — The total number of incidents reported. - `incidents_resolved` integer — The total number of incidents resolved. - `investigated_mav_detection_count` integer — A count of investigated Managed Antivirus (MAV) detections. - `investigations_completed` integer — The total number of investigations completed in this report. - `itdr_entities` integer — A count of Identity Threat Detection Response entities - `itdr_events` integer — A count of Identity Threat Detection Response events - `itdr_incidents_reported` integer — The number of Identity Threat Detection Response incidents reported - `itdr_investigations_completed` integer — A count of Identity Threat Detection Response investigations completed - `itdr_signals` integer — The total number of Identity Threat Detection Response signals - `itdr_billable_identity_count` integer — The number of billable identities for Identity Threat Detection Response. - `itdr_non_billable_identity_count` integer — The number of non-billable identities for Identity Threat Detection Response. - `itdr_license_distribution` unknown - `itdr_usage_locations` string[] — Top usage locations for Identity Threat Detection Response, as ISO country codes. - `linux_agent_count` integer — The number of Linux agents. - `macos_agent_count` integer — The number of MacOS agents. - `macos_agents` boolean — Indicates whether there are _any_ MacOS agents. - `mav_incident_report_count` integer — A count of Managed Antivirus (MAV) incident reports. - `new_exclusions_count` integer — The number of new exclusions since the last summary report. - `only_macos_agents` boolean — Indicates whether there are _only_ MacOS agents. - `organization_id` integer — Unique identifier for the organization this summary report is associated with. - `period` string — A date range representing the coverage of the report, formatted as `start_date...end_date`. - `powerful_application_count` integer — The number of powerful applications detected. - `potential_threat_indicators` integer — A count of the potential threat indicators. - `process_detections` integer — The total number of process detections. - `process_detections_reported` integer — A count of the process detections reported. - `process_detections_reviewed` integer — A count of the process detections reviewed. - `protected_profiles_count` integer — The number of protected profiles. - `ransomware_note` string — The ransomware note for this report. - `risky_exclusions_removed_count` integer — The number of risky exclusions removed. - `risky_services_count` integer — The number of risky external services discovered. - `rogue_app_incidents` ReportIncident[] — Details of rogue application incidents detected. - `id` integer — The incident report identifier. - `severity` string — The severity level of the incident. - `sent_at` string — ISO-8601 formatted timestamp for when the incident was sent. - `event_summary` string — A brief summary of the incident event. - `body` string — The full description of the incident. - `remediations` ReportIncidentRemediation[] — Remediation actions taken for this incident. - `type` string — The remediation type. - `subtype` string — The remediation action category. - `servers_agent_count` integer — The number of server agents. - `shadow_workflow_incidents` ReportIncident[] — Details of shadow workflow incidents detected. - `id` integer — The incident report identifier. - `severity` string — The severity level of the incident. - `sent_at` string — ISO-8601 formatted timestamp for when the incident was sent. - `event_summary` string — A brief summary of the incident event. - `body` string — The full description of the incident. - `remediations` ReportIncidentRemediation[] — Remediation actions taken for this incident. - `type` string — The remediation type. - `subtype` string — The remediation action category. - `siem_incidents_reported` integer — The number of Security Information & Event Management incidents reported - `siem_ingested_logs` integer — A count of Security Information & Event Management ingested logs - `siem_investigations_completed` integer — A count of Security Information & Event Management signals that have been investigated - `siem_signals` integer — The total number of Security Information & Event Management signals - `siem_total_logs` integer — A count of Security Information & Event Management total logs - `signals_detected` integer — A count of total signals detected. - `signals_investigated` integer — A count of total signals investigated. - `top_incident_av_threats` string[] — A list of the top av threats. - `top_incident_hosts` string[] — A list of the top hosts by number of incidents. - `total_entities` integer — A count of the total entities included in this report. - `total_mav_detection_count` integer — A count of the Managed Antivirus (MAV) detections. - `type` string — The report type. Can be one of `monthly_summary`, `quarterly_summary`, `yearly_summary`. - `unwanted_access_incidents` ReportIncident[] — Details of unwanted access incidents detected. - `id` integer — The incident report identifier. - `severity` string — The severity level of the incident. - `sent_at` string — ISO-8601 formatted timestamp for when the incident was sent. - `event_summary` string — A brief summary of the incident event. - `body` string — The full description of the incident. - `remediations` ReportIncidentRemediation[] — Remediation actions taken for this incident. - `type` string — The remediation type. - `subtype` string — The remediation action category. - `updated_at` string, date-time — ISO-8601 formatted timestamp for when this summary report was last updated. - `url` string — The direct url to the pdf version of this summary report. - `windows_agent_count` integer — The number of Windows agents. - `weak_application_count` integer — The number of weak applications detected. - `windows_agents` boolean — Indicates whether there are _any_ Windows agents. ## Other responses - `403` — There was an issue with your API credential or permissions. --- [API](https://skmtc.net/huntress/apis/huntress-api-reference.md) · [All operations](https://skmtc.net/huntress/apis/huntress-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/huntress/huntress-api-reference/revisions/94acb422c07d/schema)