Download Admission Audit Events
Returns the access admission events data in CSV format that were alerted or blocked by Defender functioning as Open Policy Agent admission controller.
Refer to the following example cURL command that downloads the admission audit events:
$ curl -k \
-u <USER> \
-H 'Content-Type: text/csv' \
-X GET \
-o <admission_audits.csv> \
Offsets the result to a specific report count. Offset starts from 0.
Limit is the amount to fix.
Sorts the result using a key.
Sorts the result in reverse order.
From is an optional minimum time constraints for the activity.
To is an optional maximum time constraints for the activity.
Namespaces is the list of namespaces to use for filtering.
Operations is the list of operations to use for filtering.
Clusters is the cluster filter.
AttackTechniques are the MITRE attack techniques.