About the cortex-xdr-client

A python-based API client for Cortex XDR API.

Currently, it supports the following Cortex XDR Prevent & Pro APIs:

Alerts API:

• Get Alerts

Downloads API:

• Download File

Endpoints API:

• Get All Endpoints
• Get Endpoint
• Isolate Endpoints
• Unisolate Endpoints
• Scan Endpoints
• Set an Endpoint Alias
• Retrieve File
• Quarantine File

Incidents API:

• Get Incidents
• Get Extra Incident Data

Indicators API:

• Insert Simple Indicators JSON

Response Actions API:

• Get Action Status

Scripts API:

• Get Scripts
• Get Script Metadata
• Get Script Execution Status
• Get Script Execution Results
• Get Script Execution Result Files
• Run Script
• Run Snippet Code Script

XQL API:

• Start XQL
• Get XQL Results
• Get XQL Result Stream

Contributing:

See CONTRIBUTING.md for details.