About the cortex-xdr-client

A python-based API client for Cortex XDR API.

Currently, it supports the following Cortex XDR Prevent & Pro APIs:

Alerts API:

• Get Alerts

Downloads API:

• Download File

Endpoints API:

• Get All Endpoints

• Get Endpoint

• Isolate Endpoints

• Unisolate Endpoints

• Scan Endpoints

• Set an Endpoint Alias

• Retrieve File

• Quarantine File

Incidents API:

• Get Incidents

• Get Extra Incident Data

Indicators API:

• Insert Simple Indicators JSON

Response Actions API:

• Get Action Status

Scripts API:

• Get Scripts

• Get Script Metadata

• Get Script Execution Status

• Get Script Execution Results

• Get Script Execution Result Files

• Run Script

• Run Snippet Code Script

XQL API:

• Start XQL

• Get XQL Results

• Get XQL Result Stream

Contributing:

See CONTRIBUTING.md for details.