Advanced Threat Protection

 View Only
Expand all | Collapse all

I need to use the example using the API

gencakademi

gencakademiApr 14, 2018 04:29 PM

  • 1.  I need to use the example using the API

    Posted Feb 23, 2018 09:50 AM

    I am using Symantec version 14.
    I want to manage using API
    I want to see multiple client information through the API.

    I looked up the forum and found no API examples using Python.
    Please tell me how to use multiple languages using the API



  • 2.  RE: I need to use the example using the API

    Posted Feb 24, 2018 08:05 AM

    All info in regards to the API for SEP 14 are in these:

    http://www.symantec.com/docs/DOC9447

    http://www.symantec.com/docs/HOWTO125873

    http://www.symantec.com/docs/TECH239975



  • 3.  RE: I need to use the example using the API

    Posted Feb 25, 2018 12:42 AM
    Below is python program to intract with SEPM API. You can use same as template to enhance feature. Share specific scenario you trying to solve using API, I will also try. https://www.symantec.com/connect/articles/get-information-computers-using-sepm-api-python


  • 4.  RE: I need to use the example using the API

    Posted Feb 27, 2018 05:26 AM

    こんにちはあなたの投稿はすでに確認してい
    ありがとうございます。

    しかし、私が欲しいのは、コンピュータのリストではなく、「感染したPCリスト、IP"です。
    私に教えてくださったAPIを使用したとき
    THREATを変更すると、レポートが出ていない。

    コンピュータ名とIPは正常に出ました。
    しかし、私が必要なのは危険レポートです。

    これ解決することができますか?
    お願いします。

     

     

     

    Hello Your post has already been verified
    Thank you.

    But what I want is a list of infected PCs, not IPs.
    When you use the API you told me
    If THREAT was changed, the report did not appear.

    The computer name and IP were normal.
    But what I need is a risk report.

    Can we solve this?
    Please.



  • 5.  RE: I need to use the example using the API

    Posted Mar 02, 2018 05:11 AM

    I want to see the number of malicious code infections
    How do I implement it?



  • 6.  RE: I need to use the example using the API

    Posted Apr 14, 2018 04:29 PM

     

    thank you everyone for sharing



  • 7.  RE: I need to use the example using the API

    Posted Apr 16, 2018 12:15 AM

    Additional link for reference https://www.symantec.com/connect/articles/python-flask-application-gup-server-monitoring-using-sepm-rest-api

    use this to review list of all GUP servers and there status.



  • 8.  RE: I need to use the example using the API

    Posted Apr 17, 2018 12:11 AM

    I searched in the API rerence but, I could not find which one to use to get the client  virus definition.  someone  please help me with this.

    thanks in advance



  • 9.  RE: I need to use the example using the API

    Posted Apr 17, 2018 12:13 AM

    Hi Ashish can you help me get the client definition status of single end point client through API 



  • 10.  RE: I need to use the example using the API

    Posted Jul 29, 2018 11:08 AM

    Hi Ashish,

    Thank you for your reply

    The question I need to have answered is can I add the following IoC's directly to SEP to be sent to clients via the API (preferably using Python), I have TIP (threat intel platform) that can export themin various formats

    1. File hashes
    2. IP Addresses
    3. Domains
    4. FQDN
    5. Other Indicators of Compromise

    What format would they need to be imported? JSON XML, CSV, TXT STIX/TAXII

     

    Many thanks for all you help with this

     

    JB



  • 11.  RE: I need to use the example using the API

    Posted Aug 16, 2018 07:16 AM

    virus definition per say is not available in API. you may connect to SEPM database for this information