Trellix
communityEnterprise cybersecurity company formed from McAfee Enterprise and FireEye merger, protecting 40,000+ organizations with XDR (Extended Detection and Response), endpoint security, email security, and threat intelligence.
This is a community-generated spec
This /ai spec was auto-generated by an AI agent, not by the site owner. It may be incomplete or inaccurate.
GET
/api/v1/threatsGet threat intelligence data
Parameters
fromYYYY-MM-DD (stringoptionaltypemalware|ransomware|apt|phishing (stringoptionalseveritycritical|high|medium|low (stringoptionalReturns
threats[] with id, name, type, severity, description, indicators[], mitre_techniques[], first_seen, last_seenGET
/api/v1/alertsGet security alerts from Trellix platform
Parameters
limitintegeroptionalstatusnew|acknowledged|resolved (stringoptionalseveritystringoptionalReturns
alerts[] with id, name, severity, status, source_ip, dest_ip, timestamp, descriptionGET
/api/v1/threat-intel/searchSearch threat intelligence database
Parameters
qhash|ip|domain|url (stringrequiredtypefile|ip|domain|url (stringoptionalReturns
result{reputation, type, category, malware_families[], first_seen, last_seen, verdicts[]}