Audits
Retrieve audits from the Prisma Cloud Compute database. Prisma Cloud Compute creates and stores audit events for the components that are associated with a policy (rule) and shows deviation from that policy. Endpoints support a wide range of filtering options.
📄️ Get Docker Access Audit Events
Retrieves all docker access audit events that are logged and aggregated for any container resource protected by a Defender in Prisma Cloud Compute.
📄️ Download Docker Access Audit Events
Returns the docker access audit events data in CSV format that are logged and aggregated for any container resource protected by a Defender in Prisma Cloud Compute.
📄️ Get Admission Audit Events
Returns all activities that were alerted or blocked by Defender functioning as Open Policy Agent admission controller.
📄️ Download Admission Audit Events
Returns the access admission events data in CSV format that were alerted or blocked by Defender functioning as Open Policy Agent admission controller.
📄️ Get WAAS Agentless Audit Events
Retrieves all agentless Web-Application and API Security (WAAS) audit events.
📄️ Download WAAS Agentless Audit Events
Returns the agentless Web-Application and API Security (WAAS) audit events data in CSV format.
📄️ Get WAAS Agentless Audit Events for a Timeframe
Retrieves all agentless Web-Application and API Security (WAAS) audit buckets based on a specified query time frame.
📄️ Get WAAS App-embedded Audit Events
Returns all app-embedded WAAS audit events for the specified query parameters.
📄️ Download WAAS App-embedded Audit Events
Returns the app-embedded WAAS audit events data in CSV format for the specified query parameters.
📄️ Get WAAS App-embedded Audit Events for a Timeframe
Returns the app-embedded WAAS audit buckets based on the query time frame.
📄️ Get WAAS Container Audit Events
Retrieves all container Web-Application and API Security (WAAS) audits.
📄️ Download WAAS Container Audit Events
Returns the container Web-Application and API Security (WAAS) audit events data in CSV format.
📄️ Get WAAS Container Audit Timeslice
Retrieves all container Web-Application and API Security (WAAS) audit events for a specific time frame.
📄️ Get WAAS Host Audit Events
Retrieves all host Web-Application and API Security (WAAS) audit events.
📄️ Download WAAS Host Audit Events
Returns the host Web-Application and API Security (WAAS) audit events data in CSV format.
📄️ Get WAAS Host Audit Timeslice
Retrieves all host Web-Application and API Security (WAAS) audit events.
📄️ Get WAAS Serverless Audit Events
Retrieves all serverless function Web-Application and API Security (WAAS) audit events.
📄️ Download WAAS Serverless Audit Events
Returns the serverless function Web-Application and API Security (WAAS) audit events data in CSV format.
📄️ Get WAAS Serverless Audit Events for a Timeframe
Retrieves all serverless Web-Application and API Security (WAAS) audit buckets based on a specified query time frame in UTC.
📄️ Get CNNS Container Audit Events
Retrieves all Cloud Native Network Segmentation (CNNS) container audit events.
📄️ Download CNNS Container Audit Events
Returns the Cloud Native Network Segmentation (CNNS) container audit events data in CSV format.
📄️ Get CNNS Host Audit Events
Retrieves all Cloud Native Network Segmentation (CNNS) host audits.
📄️ Download CNNS Host Audit Events
Returns the Cloud Native Network Segmentation (CNNS) host audit events data in CSV format.
📄️ Get Incident Audit Events
Retrieves a list of incidents that are not acknowledged (i.e., not in archived state).
📄️ Archive an Incident Audit Event
Acknowledges an incident and moves it to an archived state.
📄️ Download Incident Audit Events
Downloads a list of incidents which are not acknowledged (i.e., not in archived state) in CSV format.
📄️ Get Kubernetes Audit Events
Retrieves events that occur in an integrated Kubernetes cluster that you configured for Prisma Cloud Compute under **Defend > Access > Kubernetes**.
📄️ Download Kubernetes Audit Events
Returns the audit events data that occur in an integrated Kubernetes cluster that you configured for Prisma Cloud Compute under **Defend > Access > Kubernetes** in CSV format.
📄️ Get Management Audit Events
Retrieves a list of all management audit events.
📄️ Download Management Audit Events
Returns the management audit events data in CSV format.
📄️ Get Management Audit Event Filters
Retrieves a list of management audit types from your environment.
📄️ Get Runtime App-embedded Audit Events
Retrieves all app-embedded runtime audit events.
📄️ Download Runtime App-embedded Audit Events
Returns the app-embedded runtime audit events data in CSV format.
📄️ Get Runtime Container Audit Events
Retrieves all container audit events when a runtime sensor such as process, network, file system, or system call detects an activity that deviates from the predictive model.
📄️ Download Runtime Container Audit Events
Returns the container audit events data in CSV format when a runtime sensor such as process, network, file system, or system call detects an activity that deviates from the predictive model.
📄️ Get Runtime Container Audit Events for a Timeframe
Retrieves the container audit events when a runtime sensor such as process, network, file system, or system call detects an activity that deviates from the predictive model for a specific time frame.
📄️ Get Runtime File Integrity Audit Events
Retrieves all audit events for file-integrity checks that are configured under host runtime rules.
📄️ Download Runtime File Integrity Audit Events
Returns the audit events data in CSV format for file-integrity checks that are configured under host runtime rules.
📄️ Get Runtime Host Audit Events
Retrieves the runtime host audit events.
📄️ Download Runtime Host Audit Events
Returns the runtime host audit events data in CSV format.
📄️ Get Runtime Host Audit Events for a Timeframe
Retrieves the runtime host audit events for a specific time frame.
📄️ Get Runtime Log Inspection Audit Events
Retrieves all audit events for log inspection checks that are configured under host runtime rules.
📄️ Download Runtime Log Inspection Audit Events
Returns the audit events data in CSV format for log inspection checks that are configured under host runtime rules.
📄️ Get Runtime Serverless Audit Events
Retrieves all scan events for any configured serverless functions in Prisma Cloud Compute.
📄️ Download Serverless Audit Events
Returns the scan audit events data in CSV format for any configured serverless functions in Prisma Cloud Compute.
📄️ Get Runtime Serverless Audit Events for a Timeframe
Retrieves all scan events for any configured serverless functions in Prisma Cloud Compute for a specific time frame.
📄️ Get Trust Audit Events
Retrieves all the trust audit events.
📄️ Download Trust Audit Events
Returns the trust audit events data in CSV format.