incident_detections__list_detections_v1
Retrieve ESET detections matching time, device, or pagination criteria to review incidents and investigate security events.
Instructions
List detections - (GET /v1/detections) - Return a list of all the [detection]s matching criteria.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| fields | No | Optional server-side projection: return only these keys for each list-item in the response. Reduces token usage on large list endpoints. Example: ['uuid','displayName']. Top-level fields (e.g. nextPageToken) are always preserved. Not forwarded to ESET - applied locally after fetch. | |
| endTime | No | Include only incidents whose detections occurred before `end_time` (excluding). `detection.occur_time` < `end_time` Use timestamp in UTC or offset format. Examples: - 2024-10-30T12:00Z - 2024-10-30T10:00+02:00 > **Info:** > [Google Protobuf: Timestamp](https://protobuf.dev/reference/php/api-docs/Google/Protobuf/Timestamp.html) | |
| pageSize | No | Limit for pagination purposes. If unspecified or 0, the default value is 50. The maximum value is 1000; values above 1000 will be coerced to 1000. > **Info:** > For more information, refer to [Paginating Requests in APIs](https://medium.com/@ignaciochiazzo/paginating-requests-in-apis-d4883d4c1c4c) > > or [Design Patterns: Pagination](https://google.aip.dev/158) | |
| pageToken | No | Page token of the current page. If not given or "", the first page is returned. > **Info:** > For more information, refer to [Paginating Requests in APIs](https://medium.com/@ignaciochiazzo/paginating-requests-in-apis-d4883d4c1c4c) > > or [Design Patterns: Pagination](https://google.aip.dev/158) | |
| startTime | No | Include only incidents whose detections occurred after `start_time` (including). `detection.occur_time` >= `start_time` Use timestamp in UTC or offset format. Examples: - 2024-10-30T12:00Z - 2024-10-30T10:00+02:00 > **Info:** > [Google Protobuf: Timestamp](https://protobuf.dev/reference/php/api-docs/Google/Protobuf/Timestamp.html) | |
| deviceUuid | No | Include only [detections] that occurred on the referenced [device]. type: device_management.v1.Device |