DocumentationAPI ExplorerRecipesConnectChangelogRSSSubscribe
API Explorer
  1. Identity Exposure
  2. AD Objects

Search AD objects with deviances

post
https://{customer}.tenable.ad/api/profiles//checkers//ad-objects/search

Searches the AD objects that the specified checker flags as deviant in the specified security profile. The request body filters the results by query expression, directory, reason and date range.

Requires the ioe license type. See License Types.

Requires the Read permission on the Profiles, Forests, Domains, and Indicators of Exposure entities (read:profile, read:infrastructure, read:directory, read:checker). See Identity Exposure Permissions.
Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
string
required
^[0-9]+$

Specifies the ID of the security profile.

string
required
^[0-9]+$

Specifies the ID of the checker.

Query Params
string
^[0-9]+$

Specifies the maximum number of AD objects to return per page.

string
^[0-9]+$

Specifies the page of results to return. The first page is 1.

Body Params

Validates GET /ad-objects/ params

expression
object
required

Specifies the query expression that filters the AD objects. An expression is an AND or OR operator that holds a list of conditions, each pairing an attribute name with a value, such as {"AND": [{"cn": "admin"}]}. A single condition can also stand alone. A condition matches attribute values that contain the specified text, regardless of case, and an unrecognized operator matches nothing. An empty object applies no filter.

directories
array of integers
required

Filters results to AD objects in the specified directories.

directories*
reasons
array of integers
required

Filters results to AD objects with deviances for the specified reasons.

reasons*
date-time

Specifies the start of the time range for the deviances to search, as an ISO timestamp.

date-time

Specifies the end of the time range for the deviances to search, as an ISO timestamp.

boolean | null
required

Specifies whether to include AD objects whose deviances are ignored.

Responses

401

Returned if the API key specified in your request is invalid.

500

Returned if an internal error occurred.

Updated 1 day ago

Did this page help you?
Language
Credentials
Header
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json

Updated 1 day ago

Did this page help you?