The following API endpoints are provided by the Process Guard Module.
Note
These API endpoints focus on the retrieval of LSASS process access events. For more information on other Endpoint Security Server API calls, refer to the Endpoint Security REST API Guide Release 5.0.
API | Route | Description |
|---|---|---|
Status |
| GET: Returns the module’s status, for example whether the server component is running or not. If running, it will return healthy. |
Meta-data |
| GET: Returns the column definitions and metadata for the grid table. |
Events |
| GET: Returns events in JSON format. |
Events |
| GET: Exports events details in CSV format. |
Settings |
| GET: Returns the user's settings for the events grid UI POST, which saves the user's settings. DELETE: Deletes user settings. |
Settings |
| POST: Imports the grid UI settings. |