Mandiant

Mandiant Job Actions API

The result of running an action as part of a simulation. Belongs to a Job

Documentation GitHub OpenAPI

Operations 1

PUT /job_actions/{id} Update an existing Job Action #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/mandiant:mandiant-job-actions-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Mandiant Job Actions API
  version: 4.14.7.0
  description: 'Operations tagged Job Actions across 2 of this provider''s published API definitions: mandiant-msv-openapi.yml, mandiant-msv-openapi.yml. Each path carries the servers of the definition it was published in.'
tags:
- name: Job Actions
  description: The result of running an action as part of a simulation. Belongs to a Job
paths:
  /job_actions/{id}:
    put:
      summary: Update an existing Job Action
      description: Job Actions are mostly immutable objects. The include_in_reports parameter can be updated. When include_in_reports is set to false the job action will not be included in reports
      tags:
      - Job Actions
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: integer
        description: The ID of the job action to update.
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                job_action:
                  type: object
                  properties:
                    include_in_reports:
                      type: boolean
            example:
              job_action:
                include_in_reports: false
      responses:
        '200':
          description: Success
          content:
            application/json:
              example:
                id: 1
                job_step_id: 1
                sim_action_id: 651
                status: not run
                attacker_status: null
                target_status: null
                began_at: null
                ended_at: null
                created_at: '2020-08-18T20:08:40.209Z'
                updated_at: '2020-08-19T13:27:22.853Z'
                blocked: null
                blocked_desc: null
                detected: null
                detected_desc: null
                organization_id: 1
                simulation_id: 56
                step_id: 127
                plan_id: 1
                job_id: 1
                attack_node_id: 3
                target_node_id: 4
                action_order: 1
                conversations: null
                action_type: null
                monitor_def_id: null
                plan_step_id: 1
                monitor_step_id: null
                proxy_comm_id: null
                run_time:
                  use_monitor_interface: false
                  use_ip_addresses: false
                hex_http: true
                from_email_profile_id: null
                to_email_profile_id: null
                email_unique_identifier: null
                action_user_profile_id: null
                email_status: null
                inetsim_log: null
                unexpected_response: null
                block_rule_id: null
                expanded_info: null
                port_scan_status: null
                include_in_reports: false
                cli_pid: null
                cli_ppid: null
                run_as_captive_ioc_pcap: false
                action_variables: {}
                host_cli_language: null
      operationId: putJobActionsById
      x-operation-id-source: derived
x-refined-from:
- mandiant-msv-openapi.yml
- mandiant-msv-openapi.yml