DocumentationAPI ExplorerRecipesConnectChangelogRSSSubscribe
Changelog
Back to All
added

Attack Path: New exclude_resolved Query Parameter

1 day ago by Lance Duvall

Tenable has added a new optional exclude_resolved query parameter to the Attack Path search endpoints. This parameter enables you to control whether resolved items are included in search results.

By default, exclude_resolved is set to true, meaning resolved items are excluded from results. Set the parameter to false to return all items regardless of status or state.

This enhancement enables you to:

  • Focus on active attack paths and techniques by default
  • Prioritize actionable data
  • Explicitly include resolved items when performing historical analysis or reporting

Updated Endpoints

Endpoint: Search attack paths

The following query parameter is now supported:

ParameterData TypeDefaultDescription
exclude_resolvedBooleantrueExcludes resolved attack paths from the results. When true (default), the system filters out paths with the following path_status values:

  • done — Remediation is complete.
  • chain_prevented — The attack chain is partially broken.
  • accepted — The risk is accepted.
Set to false to include all attack paths regardless of status.

Endpoint: Search attack techniques

The following query parameter is now supported:

ParameterData TypeDefaultDescription
exclude_resolvedBooleantrueExcludes resolved attack techniques from the results. When true (default), the system filters out techniques with the following values:

  • Status — done, accepted
  • State — archive
Set to false to include all techniques regardless of status or state.