| Field | Operator | Value |
|---|---|---|
Threat List |
is not empty | |
Last Time Seen |
older than | 14 days |
Agent Enabled (True/False) |
== | True |
LDG fields used:
Threat ListLast Time SeenAgent Enabled (True/False)Supporting endpoints:
GET /web/api/v2.1/agents (infected, lastActiveDate filters)POST /web/api/v2.1/agents/actions/connect