Cisco AMP for Endpoints API

GET /v0/computers/{:connector_guid}

Description

Shows information about a specific computer.

Show Response Fields

Name Type Description
version String
metadata.links.self String
data.connector_guid GUID
data.hostname String
data.active Boolean
data.links.computer String
data.links.trajectory String
data.links.group String
data.connector_version String
data.operating_system String
data.internal_ips Array
data.internal_ips[] String
data.external_ip String
data.group_guid GUID
data.install_date String (Time ISO8601)
data.network_addresses Array
data.network_addresses[].mac String
data.network_addresses[].ip String
data.policy.guid GUID
data.policy.name String
Write
Preview

Examples

Fetch computer with given connector_guid

Fetch computer with given connector_guid

Request

Requires Authorization
GET /v0/computers/55d4faec-9481-4686-a667-f71ec35e7a6d
Headers
accept: application/json
content-type: application/json
accept-encoding: identity
authorization: Basic FILTERED

cURL Edit, then copy and paste on your terminal

curl -X GET \
-H 'accept: application/json' \
-H 'content-type: application/json' \
-H 'accept-encoding: identity' \
--compressed -H 'Accept-Encoding: gzip, deflate' \
-u YOUR_API_CLIENT_ID \
'https://api.amp.cisco.com/v0/computers/55d4faec-9481-4686-a667-f71ec35e7a6d'

Response

Shortened for readability

content-type: application/json; charset=utf-8
transfer-encoding: chunked
status: 200 OK
x-ratelimit-limit: 3000
x-ratelimit-reset: 1989
referrer-policy: strict-origin-when-cross-origin
x-ratelimit-remaining: 2856
x-permitted-cross-domain-policies: none
x-download-options: noopen
etag: W/"18c6621bedfb4b281252f1eb65f5d26d"
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2021-05-05T23:55:49Z
strict-transport-security: max-age=31536000
{
  "version": "v0.2.2",
  "metadata": {
    "links": {
      "self": "https://api.amp.cisco.com/v0/computers/55d4faec-9481-4686-a667-f71ec35e7a6d"
    }
  },
  "data": {
    "connector_guid": "55d4faec-9481-4686-a667-f71ec35e7a6d",
    "hostname": "Demo_AMP",
    "windows_processor_id": "1b932e70da84f65",
    "active": true,
    "links": {
      "computer": "https://api.amp.cisco.com/v0/computers/55d4faec-9481-4686-a667-f71ec35e7a6d",
      "trajectory": "https://api.amp.cisco.com/v0/computers/55d4faec-9481-4686-a667-f71ec35e7a6d/trajectory",
      "group": "https://api.amp.cisco.com/v0/groups/6c3c2005-4c74-4ba7-8dbb-c4d5b6bafe03"
    },
    "connector_version": "99.0.99.30065",
    "operating_system": "Windows 10 Enterprise",
    "internal_ips": [
      "29.185.115.160"
    ],
    "external_ip": "182.209.164.92",
    "group_guid": "6c3c2005-4c74-4ba7-8dbb-c4d5b6bafe03",
    "install_date": "2021-04-05T23:22:31Z",
    "is_compromised": false,
    "network_addresses": [
      {
        "mac": "c4:dd:c2:53:e2:cc",
        "ip": "29.185.115.160"
      }
    ],
    "policy": {
      "guid": "520c7c68-a637-43b1-b851-7830b0b336b6",
      "name": "Protect Policy"
    },
    "last_seen": "2021-05-05T23:22:31Z",
    "faults": [

    ],
    "isolation": {
      "available": false,
      "status": "not_isolated"
    },
    "orbital": {
      "status": "not_enabled"
    }
  }
}