---
title: "# List Custom Detection Content"
method: GET
path: "/v1/mitigation/detection-content/custom"
tags: ["Mitigation"]
---

# # List Custom Detection Content

`GET /v1/mitigation/detection-content/custom`

Lists custom detection content items for the account.

## Query parameters

- `Limit` integer
- `Offset` integer
- `Search` string
- `RuleSeverity` string[]
- `OrderBy` string
- `IsAscending` boolean

## Response `200`

GetCustomDetectionContentResponse

- object
  - `pagination` object
    - `currentPage` integer
    - `currentPageSize` integer
    - `pageSize` integer
    - `totalCount` integer
    - `totalPageCount` integer
  - `rules` object[]
    - `actions` object[] — List of associated threat actions
      - `id` integer
      - `name` string
    - `author` string — Author of the rule
    - `content_id` string — Unique identifier of the custom detection content item
    - `content_sources` object[] — Detection content sources (device-specific queries)
      - `deviceName` string
      - `policies` string[]
      - `query` string
      - `severity` string
    - `name` string — Display name of the rule
    - `severity` string — Severity level of the rule (e.g. critical, high, medium, low)
    - `tactics` string[] — List of MITRE ATT&CK tactic names
    - `techniques` object[] — List of associated MITRE ATT&CK techniques
      - `mitreId` string
      - `name` string
      - `url` string
    - `type` string — Rule type (e.g. custom)

## Other responses

- `default` — genericErrorSwagger is represents the erroneous cases

---

[API](https://skmtc.net/picussecurity/apis/picus-rest-api.md) · [All operations](https://skmtc.net/picussecurity/apis/picus-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/picussecurity/picus-rest-api/versions/cb0d02ee28f8/schema)