Skip to main content

List discovered services on a host

GET 
/api/v1/Host/:id/Services

Returns a page of the services discovered on the host, with the total count. Use it to see what runs on a host and under which account.

Permission required: Administrator role or application role. The session must have completed multifactor authentication.

Values for startType: 0 = Boot, 1 = System, 2 = Automatic, 3 = Manual, 4 = Disabled.

Values for serviceType (flags, values add together): 1 = KernelDriver, 2 = FileSystemDriver, 4 = Adapter, 8 = RecognizerDriver, 16 = Win32OwnProcess, 32 = Win32ShareProcess, 256 = InteractiveProcess.

Request​

Responses​

An object with a data array of services and a recordsTotal count of all matches. startType and serviceType are numbers; see the value lists.