Overview
This endpoint updates an existing reaction. Provide a JSON payload with the required changes, such as script content, arguments, or execution settings. Use this endpoint to modify and maintain reaction behavior without recreating it.
Authentication
Authentication type: Bearer Token, API Key.
You can create a token using client credentials obtained through the developer portal. The API Key (x-api-key) is provided in your onboarding email or on the API Access Management page.
Path (or URL)
<HTTPS Method>
PATCH https://{Trellix EDR_gateway_URL}/edr/v2/reactions/{reaction-id}
Request
Request headers
Authorization: Bearer <your_bearer_token> Content-Type: application/vnd.api+json x-api-key: <your_api_key>
Authorization: This header is used to authenticate your request. You need to replace
<your_bearer_token>with the actual token you generate.Content-Type: This header tells the server that the request body format is
json:api. Even though this specific call has no request body, the API requires this header.x-api-key: This is a custom header required by the Trellix API for authentication. You'll need to replace
<your_api_key>with the key from your onboarding email or the API Access Management page.
Request example
{
"data": {
"type": "reactions",
"attributes": {
"name": "Check_New_reaction",
"description": "Updating a new reaction",
"contents": [
{
"platform": {
"name": "windows"
},
"capability": {
"name": "Execute Powershell Script"
},
"content": ""
},
{
"platform": {
"name": "windows"
},
"capability": {
"name": "Execute Powershell Script"
},
"content": "ls"
},
{
"platform": {
"name": "windows"
},
"capability": {
"name": "Execute Powershell Script"
},
"content": "ls"
}
],
"arguments": [
{
"name": "ABC",
"type": "NUMBER"
}
],
"timeout": 60
}
}
}
Response codes
Status | Response | Description |
|---|---|---|
204 | OK | Your request was processed successfully. The server has returned the requested data. |
400 | Bad request | The server couldn't understand your request, likely due to a syntax error or an invalid parameter. |