Manage Reputations

Cybereason enables you to incorporate information from your third-party threat feeds into the Cybereason platform.

Using the Cybereason Reputation Management API, you can integrate and update threat intelligence from various sources to improve detections, view and update file reputations, and add items to the whitelist based on behavioral characteristics.

Note

Reputations for items that you manually configure are given the highest priority.

Tasks

All APIs assume a URL prefix of https://<your server>/rest.

Note

Click on any URI path to view more detailed information on a specific API request.

Task	Endpoint	Method	Returns
Download a CSV list of reputations	classification/download	GET	CSV list
Retrieve platform reputation for an item (21.2.103 and later)	classification/:item key	GET	Reputation details
Retrieve custom reputation details for an item (21.1.103 and later)	classification/reputations/list	POST	Reputation details
Add or update a custom reputation	classification/update	POST	status message