Skip Navigation

Get device threat

Request a page with a list of threats found on a specific device. The page number and page size parameters are optional. When the values are not specified, these default to 1 and 10 respectively. The maximum page size that can be specified is 200 entries per page.
Service endpoint
/devices/v2/{unique_device_id}/threats?page=m&page_size=n
Optional query string parameters
  • page: This is the page number to request.
  • page_size: This is the number of device records to retrieve per page.
Example
https://protectapi.cylance.com/devices/v2/e378dacb-9324-453a-b8c6-5a8406952195/threats?page=1&page_size=100
Method
HTTP/1.1 GET
Request headers
  • Accept: application/json
  • Authorization: Bearer
    JWT Token returned by Auth API
    with the device:threatlist scope encoded

Request

None

Response

Please see the Response status codes for more information.

Response JSON schema

Field Name
Description
classification
This is the threat classification assigned by
BlackBerry
.
cylance_score
This is the
BlackBerry
score assigned to the threat. The User API returns a raw score of -1 to 1. Threats have a negative raw score, while safe files have a positive raw score. The
Cylance
console only displays threats and uses a score of 1 to 100. A raw score of -1 equals a console score of 100.
date_found
This is the date and time (in UTC) when the threat was found on the device.
file_path
This is the file path to the threat, which includes the file name.
file_status
This is the current status of the file on the device, which can be one of the following:
  • Default (0) (Unsafe)
  • Quarantined (1)
  • Whitelisted (2)
  • Suspicious (3) (Abnormal)
  • File Removed (4) (Delete) - The file was removed from the console.
  • Corrupt (5) - The file could not be scanned. The file could be corrupt or malformed.
name
This is the name of the threat.
page_number
This is the page number requested.
page_size
This is the page size requested.
sha256
This is the SHA256 hash for the threat.
sub_classification
This is the threat sub-classification assigned by
BlackBerry
.
total_pages
This is the total number of pages that can be retrieved, based on the page size specified.
total_number_of_items
This is the total number of resource.