Get Summary Report

Example response

{
  "report": {
    "id": 1,
    "agents_count": 2,
    "analyst_name": "Jane Doe",
    "analyst_note": "Everything is awesome! Thanks for using Huntress.",
    "analyst_threats": [
      "Ransomware",
      "Dridex",
      "Jupyter"
    ],
    "analyst_title": "Senior Security Analyst",
    "created_at": "2022-03-01T20:56:15Z",
    "external_ips_count": 3,
    "external_ports_count": 12,
    "external_services": [
      {
        "name": "SSH",
        "risky": true
      },
      {
        "name": "HTTP",
        "risky": false
      }
    ],
    "firewall_enabled_count": 10,
    "global_threats_note": "World peace! No threats to see here.",
    "incident_indicator_counts": {
      "managed_av": 0
    },
    "incident_log": [],
    "incident_product_counts": {
      "edr": 16,
      "itdr": 0,
      "siem": 0
    },
    "incident_severity_counts": {
      "low": 16
    },
    "incidents_reported": 16,
    "incidents_resolved": 1,
    "itdr_billable_identity_count": 50,
    "itdr_non_billable_identity_count": 10,
    "itdr_license_distribution": {
      "Microsoft 365 E3": 25,
      "Microsoft 365 E5": 15,
      "Other": 10
    },
    "itdr_usage_locations": [
      "US",
      "CA",
      "GB",
      "DE"
    ],
    "organization_id": 7,
    "period": "2022-02-01...2022-03-02",
    "powerful_application_count": 3,
    "ransomware_note": "No ransoms to report, all is well.",
    "risky_services_count": 1,
    "rogue_app_incidents": [
      {
        "id": 12345678,
        "severity": "critical",
        "sent_at": "2026-04-17T12:34:56Z",
        "event_summary": "Suspicious login detected from unusual location.",
        "body": "A suspicious login was detected from an unusual location.",
        "remediations": [
          {
            "type": "Remediations::SessionRevocation",
            "subtype": "containment"
          }
        ]
      }
    ],
    "shadow_workflow_incidents": [
      {
        "id": 12345678,
        "severity": "critical",
        "sent_at": "2026-04-17T12:34:56Z",
        "event_summary": "Suspicious login detected from unusual location.",
        "body": "A suspicious login was detected from an unusual location.",
        "remediations": [
          {
            "type": "Remediations::SessionRevocation",
            "subtype": "containment"
          }
        ]
      }
    ],
    "top_incident_av_threats": [
      "some_threat",
      "another_threat",
      "threats_threats_threats"
    ],
    "top_incident_hosts": [
      "some_host",
      "another_host",
      "hosts_hosts_hosts"
    ],
    "total_entities": 2,
    "type": "monthly_summary",
    "unwanted_access_incidents": [
      {
        "id": 12345678,
        "severity": "critical",
        "sent_at": "2026-04-17T12:34:56Z",
        "event_summary": "Suspicious login detected from unusual location.",
        "body": "A suspicious login was detected from an unusual location.",
        "remediations": [
          {
            "type": "Remediations::SessionRevocation",
            "subtype": "containment"
          }
        ]
      }
    ],
    "updated_at": "2022-03-01T20:56:15Z",
    "url": "https://huntress.io/rails/active_storage/blobs/redirect/uuid.pdf?disposition=download",
    "windows_agent_count": 2,
    "weak_application_count": 1,
    "windows_agents": true
  }
}