Skip Navigation

Detections API

The
BlackBerry Optics
detection API allows users to interact with detection events triggered by the
BlackBerry Optics
context analysis engine (CAE). CAE allows users to take automated response actions against malicious or suspicious behavior detected on devices utilizing both machine learning models and static behavior-based rules.
The
BlackBerry Optics
detection API enables further automation of analyzing, triaging, and responding to malicious or suspicious activity prevented or detected by
BlackBerry Optics
. The workflows currently available through this API include:
  • Gathering a summary detection events that have occurred in a tenant including a detection event's ID, severity, description, occurrence time, associated device, and status.
  • Gathering the specific detection details of detection events that have occurred in a tenant, including the artifacts associated with a detection event, the status of automated response actions that have been taken against a detection event, and other granular details that compose the detection event.
  • Deleting a single or multiple detection events from a tenant.
  • Updating a detection event's status and comments in a tenant.