The Tenable Attack Path API enables users to retrieve details about attack path findings and attack path vectors. A Finding is an attack technique that exists in one or more attack paths that lead to one or more critical assets. The Findings tab in Attack Path Analysis takes your data and pairs it with advanced graph analytics and the MITRE ATT&CK® Framework to create Findings, which enables you to understand and act on the unknowns that enable and amplify threat impact on your assets and information. For more information about findings, see [Attack Path](https://docs.tenable.com/exposure-management/Content/exposure-management/attack-path/attack-path.htm) in the _Tenable Exposure Management User Guide._
Tenable Attack Path API is one of 107 APIs that Tenable publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Attack Path. The published artifact set on APIs.io includes an OpenAPI specification.
This API exposes
2 operations
across 2 paths,
and defines 20 schemas.
It is described by OpenAPI 3.0.0, at version 1.0.0.
Requests are made against a single base URL, https://www.tenable.com/downloads/api/v2.
2 operations2 paths20 schemas2 POST
Metadata
The identity and technical contract details declared by the specification.
Specification
OpenAPI 3.0.0
API Version
1.0.0
Base URL
https://cloud.tenable.com
Authentication
API Key
Resource Areas
1
Authentication & Security 1
Tenable Attack Path API declares
1 security scheme
for authenticating requests.
An API key is passed in the header as Authorization (Bearer).
By default, every request must be authenticated.
Bearer — Example: Bearer {{token}}
Paths & Operations 2
Across 2 paths, the API surfaces 2 operations — 2 POST. Each is listed below with its method, path, parameters, and response codes.
Attack Path 2
The Tenable Attack Path API enables users to retrieve details about attack path findings and attack path vectors. A Finding is an attack technique that exists in one or more attac…
The contract defines 20 schemas that model the data the API accepts and returns. The most detailed are Attack_Path_AttackTechniqueSearchResult (16 properties), Attack_Path_AbstractNodeGraphNode (14 properties), Attack_Path_VectorRow (11 properties), Attack_Path_ProcedureGraphNode (9 properties). Each schema is shown below with its type and property counts.
Attack_Path_Attack-Path-Multiple-Filters
object
A filter operator that combines multiple filter conditions for attack paths. The value array can contain both filter conditions and nested filter operators to…
2 properties1 required
Attack_Path_GraphPath
object
Graph path information associated with the vector row, including the starting node, ending node, and the segments comprising the graph path.
3 properties
Attack_Path_ProcedureGraphNode
object
The procedure node representing the method used in the attack technique.
9 properties
Attack_Path_NodeInfo
object
7 properties
Attack_Path_AttackTechniquesSearchResponse
object
Response model for attack techniques search endpoint
2 properties2 required
Attack_Path_ErrorResponse
object
3 properties
Attack_Path_AbstractRelationship
object
Information about the relationship between the starting and ending nodes.
5 properties
Attack_Path_VectorRow
object
11 properties
Attack_Path_Attack-Path-Multiple-Filters-Nested
object
Specifies a compound filter that combines multiple conditions. Use this structure to create complex, multi-level filtering logic using logical operators.
2 properties1 required
Attack_Path_AttackTechniquePaginationInfo
object
Pagination information for attack techniques search
4 properties4 required
Attack_Path_Attack-Technique-Single-Filter
object
Defines a single filter condition used to narrow the search results for attack techniques.
3 properties
Attack_Path_Attack-Technique-Multiple-Filters
object
Specifies a compound filter that combines multiple conditions. Use this structure to create complex, multi-level filtering logic using logical operators.
2 properties2 required
Attack_Path_Attack-Path-Single-Filter
object
Defines a single filter condition used to narrow the search results for attack paths.
