Incidents API
Report, track, and manage security incidents with multimedia evidence, escalation workflows, and SOC integration.
SOC Integration Required
Some incident endpoints require SOC module access. Contact your administrator for permissions.
Overview
The Incidents API provides complete incident lifecycle management from creation through resolution, with support for multimedia evidence attachment and automated escalation.
Incident Reporting
POST
/api/v1/incidents/{id}/evidenceAttach photos, videos, or audio evidence to an incident.
View in Swagger →GET
/api/v1/incidentsList incidents with filtering by status, severity, and date range.
View in Swagger →Incident Management
PUT
/api/v1/incidents/{id}/statusUpdate incident status (open, investigating, resolved, closed).
View in Swagger →POST
/api/v1/incidents/{id}/escalateEscalate incident to SOC or management with automatic notifications.
View in Swagger →POST
/api/v1/incidents/{id}/assignAssign incident to a specific team or individual.
View in Swagger →