0

I am currently working on extracting intrusion prevention rules from every computer under my Deep Security Manager, from which I will be using this data for an excel sheet.

So far, I have use the below API call to get a list of intrusion prevention rules for every computer that I have. However, the API call does not return the following pieces of data (see image, pointed with Red Arrow):

  1. Microsoft Vulnerability Code
  2. Status of scheduled task
  3. Categpry of applied Intrusion Prevention Rule

I wish to obtain similar looking result to the Intrusion Prevention table in the attached image above/below, but from the API call provided. enter image description here Link to API documentation : https://automation.deepsecurity.trendmicro.com/article/20_0/api-reference/tag/Intrusion-Prevention-Rules#operation/listIntrusionPreventionRules

Is this possible at all?

I've tried the following code (small snippet due to confidentiality of codebase):

try:
    intrusion_prevention_response = intrusion_prevention_search_handle.list_intrusion_prevention_rules_on_computer(computer.id, api_version, overrides=False)
except ApiException as e :
    print("An exception occurred when calling ComputerIntrusionPreventionRuleDetailsApi.describe_intrusion_prevention_rule_on_computer: %s\n" % e)

But there is no way to access the following fields from the response of this API call

  1. Microsoft Vulnerability Code, eg. intrusion_prevention_response[0].microsoft_vulnerability_code for example
  2. Status of scheduled task, eg. intrusion_prevention_response[0].scheduled_task_status
  3. Category of applied Intrusion Prevention Rule, eg. intrusion_prevention_response[0].category

0 Answers0