cURL
Detection Rules
Test a detection query
Execute a detection query and return sample results. Uses limited time range and row count.
POST
cURL
Authorizations
API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here
Path Parameters
Response
Successful response
Total matching rows in the test time window (may exceed returned sample size)
Single best platform-specific estimate used to display hits/hr