The ProductSummary API can be used to retrieve information about software installed in your environment.
ProductSummary contains both identified software and identified KB, for SAM view it's recommended to filter out the KB ("isCPE:true").
https://<hostname>:<port>/job-rest-service/job/search/<companyname>-<jobname>/ProductSummary
<hostname>: Azure hostname
<port>: Azure port
<companyname>: Customer's company name
<jobname>: Customer's jobname defined in Connect>
Content-Type: application/json
Accept: application/json
X-MS-VERSION: v0.1.1
X-AD-Authorization: <azureToken>
Content-Type: application/xml
Accept: application/xml
X-MS-VERSION: v0.1.1
X-AD-Authorization: <azureToken>
{
"pageNumber": <pageNumber>,
"pageSize": <pageSize>,
"criteria":{
"query": {
"bool": {
"must": [
<filter>
],
"must_not": [
<filter>
]
}
}
}
}
<pageNumber>: page number to retrieve
<pageSize>: number of results per page. The maximum is set to 200
<filter>: query's filter. Sample retrieve all un-patched vulnerabilities
{ "term": { "isCPE": "true" }}
{ "terms": { "cvss_Severity": ["Critical","High"] }}
<SearchArgs>
<pageNumber>[pageNumber]</pageNumber>
<pageSize>[pageSize]</pageSize>
<criteria>
{"query":{"bool":
{"must":[filter]},{"must_not":[filter]}
}}
</criteria>
</SearchArgs>
[pageNumber]: page number to retrieve
[pageSize]: number of results per page. The maximum is set to 200
[filter]: query's filter. Sample retrieve all un-patched vulnerabilities
{ "term": { "isCPE": "true" }}
{ "terms": { "cvss_Severity": ["Critical","High"] }}
The response above provide 3 key attributes for the pagination
if you have questions or issues using the API, please contact us as support@fatstacks.tech