quarantine_status
Retrieve quarantine status for specified files by supplying endpoint ID, file path, and file hash. Check whether files are quarantined.
Instructions
Get Quarantine Status
Retrieve the quarantine status for specified files.
Required license: Cortex XSIAM Premium or Cortex XSIAM Enterprise or Cortex XSIAM Enterprise Plus
[POST /public_api/v1/quarantine/status] · Response Action
Example request body:
{
"request_data": {
"files": [
{
"endpoint_id": "<endpoint ID>",
"file_path": "C:\\<file path>\\test_x64.msi",
"file_hash": "<hash value>"
}
]
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request_data | Yes |