Get all attack path findings

Fetches all attack path findings and their associated details, including documentation.

GET /api/v2/attack-paths/details

Get all attack path findings

cURL

curl --request GET \
  --url https://your-tenant.bloodhoundenterprise.io/api/v2/attack-paths/details \
  --header 'Authorization: Bearer <token>'

200

{
  "findings": [
    {
      "target_id": "<string>",
      "target_kind": "<string>",
      "target_properties": {},
      "finding_name": "<string>",
      "environment_id": {},
      "impact_percentage": 123,
      "impact_count": 123,
      "accepted_until": 123,
      "asset_group": "<string>"
    }
  ],
  "finding_assets": {}
}

Authorizations

JWTBearerTokenSignedRequest & RequestDate & HMACSignature

Authorization · string · header · required

Authorization: Bearer $JWT_TOKEN

Headers

Prefer · string · default: wait=30

Prefer header, used to specify a custom timeout in seconds using the wait parameter as per RFC7240. Passing in wait=-1 bypasses all timeout limits when the feature is enabled.

Pattern: ^wait=(-1|[0-9]+)$

Response

200

application/json

OK

findings · object[] · required

List of unified findings.

Option 1

Option 2

Show child attributes

finding_assets · object · required

Directory structure of Base64 encoded assets related to each finding organized by finding name.

Show child attributes