API Documentation Changelog

Release Announcement

Release Date 9/22/2022

Threat Stack enhanced the following features in the 9/22/2022 API release:

• Fixed typos and formatting issues

Release Date 9/19/2022

Threat Stack enhanced the following features in the 9/19/2022 API release:

• Removed 409 response to Create Rules endpoint; rules with duplicate names are now allowed
• Added 409 response to Create AWS Integrations endpoint
• Updated dismissReason parameter
• Fixed typos

Release Date 9/14/2022

Threat Stack enhanced the following features in the 9/14/2022 API release:

• Updated List Alerts endpoint description to accommodate a change to the status parameter

Release Date 8/17/2022

Threat Stack enhanced the following features in the 8/17/2022 API release:

• Updated detectionMethods field

Release Date 8/3/2022

Threat Stack enhanced the following features in the 8/3/2022 API release:

• Updated getAlerts with detectionMethods field for Supervised Learning

Release Date 7/6/2022

Threat Stack enhanced the following features in the 7/6/2022 API release:

• Added Amazon Web Services (AWS) Integrations endpoints

Release Date 6/30/2022

Threat Stack enhanced the following features in the 6/30/2022 API release:

• Added new data model for CloudTrailAggregation

Release Date 6/28/2022

Threat Stack enhanced the following features in the 6/28/2022 API release:

• Added new Organization endpoints

Archived Release Information

2021 API Releases

Release Date 4/16/2021

Threat Stack enhanced the following features in the 4/16/2021 API release:

• Updated the Rate Limit section to include information about the organizational rate limit usage headers included in all API responses
• Updated the Webhooks Overview section with correct spelling of Zapier

Release Date 3/1/2021

Threat Stack enhanced the following features in the 3/1/2021 API release:

Updated the File Rule and File Rule Response models to mark the following parameters as required:

• path
• recursive

2020 API Releases

Release Date 11/18/2020

Threat Stack enhanced the following features in the 11/18/2020 API release:

Updated the List All Alerts and Get Alerts endpoint 200 responses with the following parameter:

• hostname

Release Date 08/13/2020

Threat Stack enhanced the following features in the 08/13/2020 API release:

Updated the List All CVEs endpoint to include several new parameters:

• Request:
• hasSecurityNotices
• Response:
• hasSecurityNotices (array)
• agents (array)

Release Date 02/21/2020

Threat Stack enhanced the following features in the 02/21/2020 API release:

Updated the List Ruleset endpoint to use the correct value for the agentId parameter example, and updated the 400 error message to include the correct response.

Release Date 02/03/2020

Threat Stack enhanced the following features in the 02/03/2020 API release:

Updated the Webhooks Setup with the correct network IP addresses to open in the user's firewall.

Release Date 01/17/2020

Threat Stack enhanced the following features in the 01/17/2020 API release:

Updated the following AWS EC2 Instance information:

• Updated the List AWS EC@ Instances endpoint with the verbose query string parameter and to reference both the EC2 Verbose Instance and EC2 Instance models for the 200 response.
• Updated the EC2 Verbose Instance model with the correct parameters.
• Updated the EC2 Instance model with the correct parameters.

Release Date 01/10/2020

Threat Stack enhanced the following features in the 01/10/2020 API release:

Updated the Agent Model to include the osVersion parameter

2019 API Releases

Release Date 12/11/2019

Threat Stack enhanced the following features in the 12/11/2019 API release:

• Added the EC2 Verbose model
• Updated the List AWS EC2 Instances endpoint to reflect the new EC2 verbose model and new pagination functionality.
• Updated the EC2 model to reflect the new limit parameter.

Release Date 11/22/2019

Threat Stack enhanced the following features in the 11/22/2019 API release:

• Added the Kubernetes Audit Rule model and the Kubernetes Audit Rule Response model
• Added the Kubernetes Config Rule model and the Kubernetes Audit Config Response model

Release Date 10/25/2019

Threat Stack enhanced the following features in the 10/25/2019 API release:

• Updated the Webhooks Payloads model to use the correct server_or_region parameter.
• Updated the Webhooks Overview to include [IP address]:[port] format.

Release Date 10/21/2019

Threat Stack enhanced the following features in the 10/21/2019 API release:

• Added the Windows Rule model.
• Added the Windows Rule Response model.

Release Date 10/10/2019

Threat Stack enhanced the following features in the 10/10/2019 API release:

• Updated Create Rule endpoint to use the correct spelling in the example.
• Updated Create Rule endpoint to use the correct information in alertDescription.

Release Date 9/17/2019

Threat Stack enhanced the following features in the 9/17/2019 API release:

• Updated S3 Export Enrollment endpoint with the correct heading.
• Updated Update S3 Export Enrollment endpoint with the correct heading.
• Updated Delete S3 Export Enrollment endpoint with the correct heading.
• Updated Affected Servers by CVE endpoint with correct spelling.

Release Date 8/9/2019

Threat Stack enhanced the following features in the 8/9/2019 API release:

• Updated List All Agents with correct spelling.
• Updated Alert Webhooks API Retries with correct spelling.

Release Date 7/16/2019

Threat Stack enhanced the following features in the 7/16/2019 API release:

• Updated List All CVEs endpoint with correct spelling.

Release Date 6/28/2019

Threat Stack enhanced the following features in the 6/28/2019 API release:

• Updated Dismiss Alert by Query Parameters endpoint with the seven day batch information.
• Updated Dismiss Alerts endpoint with the seven day batch information.
• Updated Rate Limit information with correct parameter spelling for organizationId.

Release Date 5/8/2019

Threat Stack enhanced the following features in the 5/8/2019 API release:

• Updated Webhooks Setup with new IP addresses.
• Updated Dismiss Alerts endpoint with the seven day batch information.
• Updated Rate Limit information with correct parameter spelling for organizationId.

Release Date 4/4/2019

Threat Stack enhanced the following features in the 4/4/2019 API release:

• Added Set Tags for a Rule endpoint.
• Updated Get Tags for a Rule endpoint to include exclusion tag parameters.

Release Date 3/18/2019

Threat Stack enhanced the following features in the 3/18/2019 API release:

• Updated Dismiss Alert endpoint
  • Added note to include either a severity, ruleId, or agentId when you dismiss alerts by query, or you receive a 400 error message
  • dismissReason parameter now displays the correct capitalization for allowed values
• Updated Create Rule Set and Update Rule Set endpoints' Request Bodies with the correct `ruleIds` parameter

Release Date 2/13/2019

Threat Stack enhanced the following features in the 2/13/2019 API release:

• Added S3 Export Enrollment model
• Added Update S3 Export Enrollment endpoint

Release Date 2/11/2019

Threat Stack enhanced the following features in the 2/11/2019 API release:

• Added Audit Log model
• Updated Audit Logs endpoint to change the userName property to the userEmail property.