xdr_list_artifacts
List artifacts collected from hosts, including logs, configs, memory dumps, and bug reports; filter by asset_id or machine_id to review collection status, size, and parts.
Instructions
List artifacts collected from hosts — what an analyst gathered through the asset's Response → Artifacts: bug reports, logs, configs, memory dumps. Filter by host with asset_id (the asset's numeric id) or machine_id; with neither, lists artifacts across all hosts. Newest first by default. Each row has 'id' (for xdr_get_artifact_structure), 'internal_id' (for xdr_download_artifact), 'parts' (what was collected), 'command_status' (New, Queued, Pending, Uploading, Uploaded, Done, Failed, Aborted) and 'size' in bytes.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | 1-based page number | |
| asset_id | No | Numeric asset id | |
| ordering | No | By creation time; default -ts_created (newest first) | |
| page_size | No | Rows per page (1-200, default 20) | |
| machine_id | No | Agent machine id (UUID); looked up to the asset id first |