curl --location 'https://your-cloud-id.threataware.com/public-api/v1/alerts?filter=allunresolved&limit=10' \
  --header 'Accept: application/json' \
  --header 'X-ThreatAware-ApiKey: your-api-key-here'

import requests

API_KEY = "your-api-key-here"
CLOUD_ID = "sandbox"
BASE_URL = f"https://{CLOUD_ID}.threataware.com/public-api/v1"

headers = {
    "Accept": "application/json",
    "X-ThreatAware-ApiKey": API_KEY
}

params = {
    "filter": "allunresolved",
    "limit": 10
}

response = requests.get(f"{BASE_URL}/alerts", headers=headers, params=params)
alerts = response.json()

print(f"Retrieved {len(alerts['data'])} unresolved alerts")

# Example: Count by severity
red_alerts = [a for a in alerts['data'] if a['state'] == 'Red']
amber_alerts = [a for a in alerts['data'] if a['state'] == 'Amber']

print(f"Red: {len(red_alerts)}, Amber: {len(amber_alerts)}")

const axios = require('axios');

const API_KEY = 'your-api-key-here';
const CLOUD_ID = 'sandbox';
const BASE_URL = `https://${CLOUD_ID}.threataware.com/public-api/v1`;

axios.get(`${BASE_URL}/alerts`, {
  headers: {
    'Accept': 'application/json',
    'X-ThreatAware-ApiKey': API_KEY
  },
  params: {
    filter: 'allunresolved',
    systemName: 'crowdstrike' // Optional: filter by integration
  }
})
  .then(response => {
    console.log(`Retrieved ${response.data.data.length} CrowdStrike alerts`);
  });

$ApiKey = "your-api-key-here"
$CloudId = "sandbox"
$BaseUrl = "https://$CloudId.threataware.com/public-api/v1"

$Headers = @{
    "Accept" = "application/json"
    "X-ThreatAware-ApiKey" = $ApiKey
}

$Params = @{
    filter = "allunresolved"
    limit = 10
}

$Response = Invoke-RestMethod -Uri "$BaseUrl/alerts" -Headers $Headers -Body $Params -Method Get

Write-Host "Retrieved $($Response.data.Count) unresolved alerts"

# Example: Group by state
$Response.data | Group-Object -Property state | Format-Table Name, Count

{
  "offset": 0,
  "limit": 1,
  "total": 100,
  "data": [
    {
      "state": "Amber",
      "product": "Automox, Software Updates",
      "status": "Incident",
      "item": "LAPTOP-001-1IWEF",
      "issue": "Pending Updates",
      "details": "Pending update of 1 patch, overdue by 5 days: Security Update KB5012345",
      "itemEntityType": "device",
      "ownerName": "",
      "timestamp": "2022-10-10T09:32:23.0000000",
      "acknowledgedTime": "0001-01-01T00:00:00.0000000",
      "assignedTime": "0001-01-01T00:00:00.0000000",
      "resolved": false,
      "acknowledged": false,
      "resolvedBy": "",
      "resolvedTime": "0001-01-01T00:00:00.0000000",
      "itemId": "f4841fbf-412e-4504-82b8-ce3c8cd2d400",
      "inactiveUntil": "0001-01-01T00:00:00.0000000",
      "hasLinkedDevice": true
    }
  ],
  "success": true,
  "statusCode": 200,
  "message": "Successfully retrieved alerts."
}