Cisco AMP for Endpoints API

GET /v1/file_lists/{:file_list_guid}/files


Returns a list of items for a particular file_list. You need to provide file_list_guid to retrieve these items.

Query Parameters

Name Type Example Values Description
limit Integer 3
offset Integer 2

Show Response Fields

Name Type Description
version String
metadata.links.self String
metadata.links.prev String Integer
metadata.results.current_item_count Integer
metadata.results.index Integer
metadata.results.items_per_page Integer String
data.guid GUID
data.policies Array
data.policies[].name String
data.policies[].guid GUID
data.policies[].links.policy String
data.items Array


Fetch file list items associated with a specific file list with given file_list_guid

Fetch file list items associated with a specific file list with given file_list_guid


Requires Authorization
GET /v1/file_lists/e773a9eb-296c-40df-98d8-bed46322589d/files?limit=3&offset=2
accept: application/json
content-type: application/json
accept-encoding: identity
authorization: Basic FILTERED

cURL Edit, then copy and paste on your terminal

curl -X GET \
-H 'accept: application/json' \
-H 'content-type: application/json' \
-H 'accept-encoding: identity' \
--compressed -H 'Accept-Encoding: gzip, deflate' \


Shortened for readability

content-type: application/json
transfer-encoding: chunked
status: 200 OK
x-ratelimit-limit: 3000
x-ratelimit-reset: 877
strict-transport-security: max-age=31536000; includeSubDomains, max-age=31536000
referrer-policy: strict-origin-when-cross-origin
x-ratelimit-remaining: 2809
x-permitted-cross-domain-policies: none
x-download-options: noopen
etag: W/"02c1174a5ff9b0e12247906a18ea7d27"
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2022-03-18T11:55:11Z
  "version": "v1.2.0",
  "metadata": {
    "links": {
      "self": "",
      "prev": "",
      "next": ""
    "results": {
      "total": 6,
      "current_item_count": 3,
      "index": 2,
      "items_per_page": 3
  "data": {
    "name": "Sample Application Blocking List",
    "guid": "e773a9eb-296c-40df-98d8-bed46322589d",
    "policies": [
        "name": "Audit Policy",
        "guid": "89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29",
        "links": {
          "policy": ""
        "name": "Audit Policy for FireAMP Linux",
        "guid": "f55db9c4-51a0-4e3b-8a3a-6532f06fc0c8",
        "links": {
          "policy": ""
    "items": [
        "sha256": "b9d61724c96d949dbcd08f15e360505c2f3fd8a8200e9b596775d23676057dd7",
        "source": "Created by entering SHA-256 via Public api.",
        "links": {
          "file_list": ""
        "sha256": "19dedfb24f26a9816f33b10e94f02cf63af4e06c0fc99c991d5e3876e2759c9e",
        "source": "Created by entering SHA-256 via Public api.",
        "links": {
          "file_list": ""