Forensics Rules

The software agents APIs are associated with managing forensic rules.

Forensic rules are used in forensic profiles which are then applied to groups of agents.

These set of APIs require the 'sensor_management' capability associated with the API key.

These APIs are only available to site admins and owners of root scopes.

• Forensic Rule Object

• Listing a Forensic Rules

• Retrieving a Single Forensic Rule

• Creating a Forensic Rule

• Update a Forensic Rule

• Delete a Forensic Rule