Skip Navigation

Get retrieved file results

Obtain a history of file retrieval requests for all devices in the tenant.

Service endpoint	/devicecommands/v2/retrieved_files?page=m&page_size=n
Optional query string parameters	q: This is the case-insensitve search term. page: This is the page number to request. Defaults to 1. page_size: This is the number of file retrieval records to retrieve per page. Defaults to 20. sort: This is used to sort by field (adding '-' in front of the value denotes descending order).
Example	https://protectapi.cylance.com/devicecommands/v2/retrieved_files?page=1&page_size=100
Method	HTTP/1.1 GET
Request headers	Accept: application/json Authorization: Bearer `JWT Token returned by Auth API` with the opticscommand:read scope encoded

Request

None

Response

Please see the Response status codes for more information.

Response JSON schema

Field Name	Description
data	This is an object containing the various fields associated with the file retrieval request.
tenant_id	This is the unique tenant ID of the tenant that the device belongs to.
user_id	This is the unique ID of the user who locked down the device.
device_id	This is the unique device ID that the lockdown command was issued to. See About device ID for device ID formatting.
created_at	This is the timestamp (in UTC) of when the file retrieval was requested.
filepath	This is the file path of the requested file.
download_url	This is the unique URL and parameters required to download the retrieved file.
file_status	This is the status of the file retrieval. This will always be "PENDING" for newly created file retrievals. REQUEST: The file retrieval has not been requested, but the user may issue a request for it. RETRY_REQUEST: The file retrieval has been requested previously but no results were received. It can be requested again. PENDING: The file retrieval has been requested but has not yet been completed. DOES_NOT_EXIST: The file retrieval has been requested but is not present on the device. AVAILABLE: The file is available for download. A download link (download_url) is generated and valid for the next 10 minutes. UNAVAILABLE: The file is not available. This status may indicate that the requested device is not online, or the requested device failed to upload the file. This status will become RETRY_REQUEST after an hour.
file_status_description	This displays any errors or status messages associated with the retrieval request.
password	This is the password required to decrypt the retrieved file.
md5	This is the MD5 hash of the retrieved file.
sha1	This is the SHA1 hash of the retrieved file.
sha256	This is the SHA256 hash of the retrieved file.
correlation_id	This is the correlation ID associated with this action.
user_login	This is the email address of the user who initiated the file retrieval request.
hostname	This is the hostname of the device that the file retrieval was requested on.

Device commands API