Guides

These guides walk through common tasks with the Elastio API, with working examples in cURL, Python and PowerShell. If you haven’t made a call yet, start with the Quickstart.

Inventory

Assets and searchList, filter and search the assets Elastio protects across clouds.

Connect cloud accountsDeploy Elastio into cloud accounts and manage deployments.

Recovery pointsFind recovery points for an asset and check what hunts found in them.

Hunts and investigations

Run a huntStart hunts and follow them to completion.

Hunt rulesManage the rules that tell Hunt what to look for, including YARA rules.

PursuitWork with Pursuit investigations, reports and findings.

Review Hunt findingsReview the ransomware, malware, encrypted files and corrupted files Hunt found.

Findings and response

Manage incidentsList, assign, comment on and close incidents.

Findings and violationsAcknowledge, suppress and resolve findings and violations.

Cloud configuration checksRead the cloud configuration overview, resources, findings and compliance.

Policies and jobs

PoliciesCreate and manage hunt policies, schedules and membership.

JobsTrack Cloud Connector and tenant jobs.

Recovery and evidence

Resilience programAutomate your recovery program and prove recovery.

Recovery verdicts and evidenceGet recovery verdicts and the evidence behind them.

Reporting

ReportsGenerate, schedule and download reports.

EQLQuery Elastio data with EQL.

Alerts and webhooks

AlertsConfigure alerts and route them to channels.

WebhooksSend Elastio events to your own endpoints.

Users and access

Users and rolesManage users, groups, roles and account groups.

Personal access tokensIssue, rotate and revoke API tokens programmatically.

Audit logsRetrieve and export the tenant audit log.

When things go wrong

TroubleshootingFix common authentication, filtering and pagination problems.