---
title: "GET /action-center/overview"
method: GET
path: "/action-center/overview"
tags: ["action-center"]
---

# GET /action-center/overview

`GET /action-center/overview`

## Response `200`

Prioritized SOC action center overview

- ActionCenterOverview
  - `degraded` boolean, required
  - `generatedAt` string, required
  - `metrics` ActionCenterMetrics, required
    - `acknowledgedAlerts` integer, required
    - `activeExploitFindings` integer, required
    - `kevFindings` integer, required
    - `openCases` integer, required
    - `openCriticalAlerts` integer, required
    - `openHighAlerts` integer, required
    - `staleOpenAlerts` integer, required
  - `priorityQueue` ActionCenterItem[], required
    - `createdAt` string, nullable
    - `description` string, nullable
    - `entityType` string, nullable
    - `entityValue` string, nullable
    - `href` string, required
    - `id` string, required
    - `primaryAction` string, required
    - `priority` string, required
    - `reason` string, required
    - `source` string, required
    - `status` string, required
    - `title` string, required
    - `updatedAt` string, nullable
  - `socActions` ActionCenterSocAction[], required
    - `href` string, required
    - `id` string, required
    - `priority` string, required
    - `source` string, required
    - `title` string, required

## Other responses

- `401` — Unauthorized

---

[API](https://skmtc.net/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.net/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ismalicious/ismalicious-threat-intelligence-api/versions/521d3d45fadb/schema)