assets_get_assets_internet_exposure
Identify internet-exposed assets by filtering on business units, externally detected providers, inferred CVEs, MAC addresses, names, IPs, XDR agent presence, active external services, and type.
Instructions
Get all Internet Exposures
Get a list of all your Internet exposure filtered by business units, externally detected providers, externally inferred CVEs, mac addresses, names, IP addresses, whether it has an XDR agent, whether it has active external services, and type.
The maximum result limit is 500 assets.
Note: You can send a request to retrieve either all or filtered results.
Required license: Cortex XSIAM Premium or Cortex XSIAM Enterprise or Cortex XSIAM Enterprise Plus
[POST /public_api/v1/assets/get_assets_internet_exposure] · Asset management
Example request body:
{
"request_data": {
"filters": [
{
"field": "has_xdr_agent",
"operator": "in",
"value": [
"n/a",
false,
true
]
},
{
"field": "has_active_external_services",
"operator": "in",
"value": [
false
]
}
],
"search_from": 0,
"search_to": 500,
"sort": {
"field": "last_observed",
"keyword": "desc"
}
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request_data | No | A dictionary containing the API request fields. An empty dictionary returns all results. |