Fetches the full list of currently active and remediable misconfigurations in the system. These represent security or configuration issues detected on client devices. Used in: The initial step to display what can be remediated.

Fetches devices affected by a specific misconfiguration or its instance. May be optionally filtered by group, OU, label, domain, etc. Used in: To retrieve the specific devices that can be remediated.

Returns all known instance values associated with a specific misconfiguration. For example, if a misconfiguration is "Adobe Reader Version", this will return the affected versions detected on devices. Used in: Second step to show the different context values the misconfiguration takes across devices.

Returns the available filter options (OS, Group, OU, etc.) that can be used to scope down which devices should be considered when fetching applicable devices or scheduling actions. Used in: Optional, depending on whether the user selects a filtering strategy.

Schedule an action to add labels to selected devices. Labels must be 2-31 characters long and contain only alphanumeric characters, hyphens, and underscores.

Retrieves the Log of a action.

Schedule an action to remove labels from selected devices. Labels must be 2-31 characters long and contain only alphanumeric characters, hyphens, and underscores.

Schedules an immediate or future remediation action to fix the misconfiguration on selected devices. Used in: Final step when the user decides to remediate.

Retrieves the current status of an action, including how many devices succeeded, failed, or are pending. Used in: After scheduling, used to monitor progress.

Retrieves the list of actions which were created or changed in the last 3 months.

Allows you to get a list of all sensor types download links.

Aggregates CIS alerts and compliance coverage at the Safeguard level (Version 8.0 by default) with compliance and maturity scores per safeguard. Each safeguard includes total alerts, applicable alerts, compliance percentage, and a maturity score (5 if compliance = 100%, otherwise 2). Safeguards without a computable score are omitted unless explicitly requested. A different version can be requested using the cisControlsVersion parameter. Empty safeguards are excluded unless includeZeroAlerts=true is provided. If no filters are applied, aggregation is performed across all alerts.

Fetches the full list of currently active and remediable misconfigurations in the system. These represent security or configuration issues detected on client devices. Used in: The initial step to display what can be remediated.

Fetches devices affected by a specific misconfiguration or its instance. May be optionally filtered by group, OU, label, domain, etc. Used in: To retrieve the specific devices that can be remediated.

Returns all known instance values associated with a specific misconfiguration. For example, if a misconfiguration is "Adobe Reader Version", this will return the affected versions detected on devices. Used in: Second step to show the different context values the misconfiguration takes across devices.

Schedules an immediate or future remediation action to fix the misconfiguration on selected devices. Used in: Final step when the user decides to remediate.

Retrieves the current status of a remediation or revert action, including how many devices succeeded, failed, or are pending. Used in: After scheduling, used to monitor progress.

Allows you to get a list of all sensor types download links.

Returns the available filter options (OS, Group, OU, etc.) that can be used to scope down which devices should be considered when fetching applicable devices or scheduling actions. Used in: Optional, depending on whether the user selects a filtering strategy.