# Kibana Security Attack discovery API API

**Canonical:** https://apis.io/apis/kibana/kibana-security-attack-discovery-api-api/  
**Provider:** Kibana — https://apis.io/providers/kibana/  
**Base URL:** https://localhost:5601/api  
**Documentation:** https://www.elastic.co/guide/en/kibana/current/api.html

Kibana Security Attack discovery API API is one of 60 APIs that [Kibana](https://apis.io/providers/kibana/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Security Attack discovery API. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.

Use the Attack discovery APIs to generate and manage Attack discoveries. Attack Discovery leverages large language models (LLMs) to analyze alerts in your environment and identify threats. Each "discovery" represents a potential attack and describes relationships among multiple alerts to tell you which users and hosts are involved, how alerts correspond to the MITRE ATT&CK matrix, and which threat actor might be responsible.

## Machine-readable artifacts (3)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/kibana/refs/heads/main/openapi/kibana-security-attack-discovery-api-api-openapi.yml
- **Documentation** — https://www.elastic.co/guide/en/kibana/current/api.html
- **Authentication** — https://www.elastic.co/guide/en/kibana/current/api-authentication.html

## Other Kibana APIs (12)

- [Kibana Actions API](https://apis.io/apis/kibana/kibana-actions-api/)
- [Kibana agent builder API](https://apis.io/apis/kibana/kibana-agent-builder-api/)
- [Kibana alerting API](https://apis.io/apis/kibana/kibana-alerting-api/)
- [Kibana APM agent configuration API](https://apis.io/apis/kibana/kibana-apm-agent-configuration-api/)
- [Kibana APM agent keys API](https://apis.io/apis/kibana/kibana-apm-agent-keys-api/)
- [Kibana APM annotations API](https://apis.io/apis/kibana/kibana-apm-annotations-api/)
- [Kibana APM server schema API](https://apis.io/apis/kibana/kibana-apm-server-schema-api/)
- [Kibana APM sourcemaps API](https://apis.io/apis/kibana/kibana-apm-sourcemaps-api/)
- [Kibana cases API](https://apis.io/apis/kibana/kibana-cases-api/)
- [Kibana connectors API](https://apis.io/apis/kibana/kibana-connectors-api/)
- [Kibana Data streams API](https://apis.io/apis/kibana/kibana-data-streams-api/)
- [Kibana data views API](https://apis.io/apis/kibana/kibana-data-views-api/)

## Tags

Security Attack discovery API

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/kibana/kibana-security-attack-discovery-api-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/kibana/.