capabilities.work

Create a shared exception list

One step with Elastic Stack. We can help you get access.

Get something done

Create a shared exception list

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Exceptions API lets you create a shared exception list in a single step (POST /api/exceptions/shared). capabilities.work can help you get signed up and connected.

  • How do I create a shared exception list that many rules can reference?
  • What do I need to provide to set up a shared exception list?
Say it to your AI assistant
  • Create a shared exception list named {name} described as {description}.
  • Set up shared list {name} for reuse across rules, description {description}.
For your developer

POST /api/exceptions/shared in Kibana Security Exceptions API. Full spec on APIs.io.

More you can do with Elastic Stack

Assign users to attack discovery alertsSearch and aggregate attack discoveriesChange the workflow status of attack discoveriesTag or untag attack discoveriesCheck the security alerts indexCreate the security alerts indexDelete the security alerts indexCheck my security detection privilegesGet a detection ruleReplace a detection ruleCreate a detection ruleDelete a detection rule