The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Single artifact acquisition by scan ID

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

To acquire a single artifact, you need a scan ID. You can find the scan ID in the AMSI scan request, in the AMSI alerts attributes field.

The following JSON example obtains a single artifact by Scan ID.

Request Body

{

    "commands": [{

            "name": "amsibuffer",

            "parameters":
[{

                    "name": "scanID",

                    "value": "p2Z74OdC2dFo6O3LKTEk2TRcSLAYLf2o"

                }

            ]

        }

    ]

}
Related articles
  • Multiple artifact acquisition
    Endpoint Security Modules (HX) > AMSI > Endpoint Security AMSI Module User Guide Release 2.1.1 > Configuring the AMSI module > Configuration API
  • List artifacts metadata by ID
    Network Security (NX) > Common Security Platform Product Docs > API Reference Release 2025.1 > Endpoints > Artifacts
  • Alert settings
    Endpoint Security Modules (HX) > AMSI > Endpoint Security AMSI Module User Guide Release 2.1.1 > Configuring the AMSI module > Configuring the AMSI server module