Kibana Security Attack discovery API API
Use the Attack discovery APIs to generate and manage Attack discoveries. Attack Discovery leverages large language models (LLMs) to analyze alerts in your environment and identify threats. Each "discovery" represents a potential attack and describes relationships among multiple alerts to tell you which users and hosts are involved, how alerts correspond to the MITRE ATT&CK matrix, and which threat actor might be responsible.
Kibana Security Attack discovery API API is one of 60 APIs that Kibana publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Security Attack discovery API. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.
This API exposes 13 operations across 11 paths, and defines 32 schemas. It is described by OpenAPI 3.0.3.
Requests are made against a single base URL, https://{kibana_url}.
Metadata
The identity and technical contract details declared by the specification.
Authentication & Security 2
Kibana Security Attack discovery API API declares
2 security schemes
for authenticating requests.
An API key is passed in the header as Authorization (apiKeyAuth).
It accepts HTTP basic authentication (basicAuth).
By default, every request must be authenticated.
apiKeyAuth— These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64A…
Paths & Operations 13
Across 11 paths, the API surfaces 13 operations — 1 DELETE, 5 GET, 6 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.
Use the Attack discovery APIs to generate and manage Attack discoveries. Attack Discovery leverages large language models (LLMs) to analyze alerts in your environment and identify…
Schemas 32
The contract defines 32 schemas that model the data the API accepts and returns. The most detailed are Security_Attack_discovery_API_AttackDiscoveryApiAlert (26 properties), Security_Attack_discovery_API_AttackDiscoveryGenerationConfig (11 properties), Security_Attack_discovery_API_AttackDiscoveryApiSchedule (11 properties), Security_Attack_discovery_API_AnonymizationFieldResponse (10 properties). Each schema is shown below with its type and property counts.
Specification
The full machine-readable OpenAPI contract behind this narrative.
Source
More from Kibana 12
Other APIs Kibana publishes across the network.