# Cisco XDR Incident Overview API

**Canonical:** https://apis.io/apis/cisco-xdr/cisco-xdr-incident-overview-api/  
**Provider:** Cisco XDR — https://apis.io/providers/cisco-xdr/  
**Base URL:** https://private.intel.amp.cisco.com  
**Documentation:** https://developer.cisco.com/docs/cisco-xdr/

Cisco XDR Incident Overview API is one of 89 APIs that [Cisco XDR](https://apis.io/providers/cisco-xdr/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Incident Overview. The published artifact set on APIs.io includes an OpenAPI specification.

The Incident Overview API from Cisco XDR — 16 operation(s) for incident overview.

## Operations (18)

| Method | Path | Summary |
|---|---|---|
| GET | `/v2/incident/{incident-id}/summary` | Full Incident Summary. Equivalent Data to v1 summary endpoints |
| GET | `/v2/incident/{incident-id}/mitre` | Mitre tactics, techniques, and subtechniques found in an incident |
| GET | `/v2/incident/{incident-id}/targets` | Incident Assets |
| GET | `/v2/incident/{incident-id}/observables` | Returns a list of observables linked to this incident |
| GET | `/v2/incident/{incident-id}/indicators` | Returns a list of indicators linked to this incident |
| GET | `/v2/incident/{incident-id}/entities` | Returns a list of entities associated with this incident |
| GET | `/v2/incident/{incident-id}/events` | Returns a list of events linked to this incident |
| POST | `/v2/incident/{incident-id}/events` | Returns a list of events linked to this incident |
| GET | `/v2/incident/{incident-id}/status` | Returns the underlying incident's investigation status with surrounding threat… |
| POST | `/v2/incident/{incident-id}/status` | Update an incident status |
| GET | `/v2/incident/{incident-id}/event-filters` | Returns the available filter params for this incident's events |
| GET | `/v2/incident/{incident-id}/verdicts` | Returns a list of events linked to this incident |
| GET | `/v2/incident/{incident-id}/graph` | Returns a graph representation of this incident |
| GET | `/v2/incident/{incident-id}/linked-casebooks` | Return Linked Casebooks |
| GET | `/v2/incident/{incident-id}/linked-incidents` | Returns linked incidents |
| GET | `/v2/incident/{incident-id}/primary-investigation` | Returns linked investigations |
| GET | `/v2/incident/{incident-id}/errors` | Returns a list of errors reported by the attached investigations |
| GET | `/v2/incident/{incident-id}/overview` | Returns baseline incident information |

## Machine-readable artifacts (1)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/cisco-xdr/refs/heads/main/openapi/cisco-xdr-incident-overview-api-openapi.yml

## Other Cisco XDR APIs (12)

- [Cisco XDR Actor API](https://apis.io/apis/cisco-xdr/cisco-xdr-actor-api/)
- [Cisco XDR Asset API](https://apis.io/apis/cisco-xdr/cisco-xdr-asset-api/)
- [Cisco XDR Asset Mapping API](https://apis.io/apis/cisco-xdr/cisco-xdr-asset-mapping-api/)
- [Cisco XDR Asset Properties API](https://apis.io/apis/cisco-xdr/cisco-xdr-asset-properties-api/)
- [Cisco XDR Attack Pattern API](https://apis.io/apis/cisco-xdr/cisco-xdr-attack-pattern-api/)
- [Cisco XDR Bulk API](https://apis.io/apis/cisco-xdr/cisco-xdr-bulk-api/)
- [Cisco XDR Bundle API](https://apis.io/apis/cisco-xdr/cisco-xdr-bundle-api/)
- [Cisco XDR Campaign API](https://apis.io/apis/cisco-xdr/cisco-xdr-campaign-api/)
- [Cisco XDR Casebook API](https://apis.io/apis/cisco-xdr/cisco-xdr-casebook-api/)
- [Cisco XDR COA API](https://apis.io/apis/cisco-xdr/cisco-xdr-coa-api/)
- [Cisco XDR Deliberate API](https://apis.io/apis/cisco-xdr/cisco-xdr-deliberate-api/)
- [Cisco XDR Event API](https://apis.io/apis/cisco-xdr/cisco-xdr-event-api/)

## Tags

Incident Overview

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/cisco-xdr/cisco-xdr-incident-overview-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/cisco-xdr/.