Home

Entity	Readiness
Logging Policy	Fully supported
Data Needed	Fully supported
Enrichments	Fully supported
Response Actions	Fully supported
Response Playbooks	Fully supported
Detection Rules	Fully supported

• Fully supported - User can view, insert, update and filter the data
• Partially supported - User can only either view/insert/filter data

Entities

• Use GET method to view the data
• Use POST method to insert or update the data
• Use PUT or PATCH method to update the data

How come POSTing data sometimes creates the object and sometimes it updates already existing one? It's title dependant. Title has to be unique among ATC entities. If the REST API finds already name object like this, it will update it instead of creating a new one.