# Malwarebytes Suspicious Activity API

**Canonical:** https://apis.io/apis/malwarebytes/malwarebytes-suspicious-activity-api/  
**Provider:** Malwarebytes — https://apis.io/providers/malwarebytes/  
**Base URL:** https://api.threatdown.com  
**Documentation:** https://api.threatdown.com/nebula/v1/docs

Malwarebytes Suspicious Activity API is one of 52 APIs that [Malwarebytes](https://apis.io/providers/malwarebytes/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Suspicious Activity. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

Suspicious Activities are found using Endpoint Detection and Response (EDR). When Suspicious Activity Monitoring is enabled via the policy, EDR watches for potentially malicious behavior on your endpoints by monitoring the processes, registry, file system, and network activity. Use these APIs to retrieve the suspicious activity records and details.

## Machine-readable artifacts (4)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/malwarebytes/refs/heads/main/openapi/malwarebytes-suspicious-activity-api-openapi.yml
- **Documentation** — https://api.threatdown.com/nebula/v1/docs
- **APIReference** — https://api.threatdown.com/nebula/v1/docs
- **Documentation** — https://cloud.malwarebytes.com/api/v2/oneview/docs

## Other Malwarebytes APIs (12)

- [Malwarebytes Account API](https://apis.io/apis/malwarebytes/malwarebytes-account-api/)
- [Malwarebytes AI Detection & Response API](https://apis.io/apis/malwarebytes/malwarebytes-ai-detection-response-api/)
- [Malwarebytes App Block API](https://apis.io/apis/malwarebytes/malwarebytes-app-block-api/)
- [Malwarebytes Assets API](https://apis.io/apis/malwarebytes/malwarebytes-assets-api/)
- [Malwarebytes Authentication API](https://apis.io/apis/malwarebytes/malwarebytes-authentication-api/)
- [Malwarebytes Case Management API](https://apis.io/apis/malwarebytes/malwarebytes-case-management-api/)
- [Malwarebytes Content Filtering API](https://apis.io/apis/malwarebytes/malwarebytes-content-filtering-api/)
- [Malwarebytes Copilot API](https://apis.io/apis/malwarebytes/malwarebytes-copilot-api/)
- [Malwarebytes Detections API](https://apis.io/apis/malwarebytes/malwarebytes-detections-api/)
- [Malwarebytes Device Control API](https://apis.io/apis/malwarebytes/malwarebytes-device-control-api/)
- [Malwarebytes DNS API](https://apis.io/apis/malwarebytes/malwarebytes-dns-api/)
- [Malwarebytes DNS Logs API](https://apis.io/apis/malwarebytes/malwarebytes-dns-logs-api/)

## Tags

Suspicious Activity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/malwarebytes/malwarebytes-suspicious-activity-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/malwarebytes/.