Get details of the riskware alert specified by its ID. This API can be called after calling the previous API that returns a list of alert JSONs. This API should be called with the 'id' value returned in those JSONs.
GET https://<etp-instance>/api/v1/alerts/riskware/<id>
Required headers:
Content-Type: "application/json"—Content type of the request body.
If the domain you use you use to access the Trellix UI ends in fireeye.com:
x-fireeye-api-key: <key>—Specifies your personal API key.
If the domain you use to access the Trellix UI ends in trellix.com:
authorization: bearer <access_token>—Specifies your personal access token.
Important
Use
authorization: bearer <access_token>in place ofx-fireeye-api-key: <key>in the following examples.
Example of the request
GET https://<APIURI>/alerts/riskware/3yPuZf7-1123361-df969e9c-f833-410c-bfcc-b25e90c79944 -H 'x-fireeye-api-key: <APIKEY>'