OrgsAdvanced Anti Malware Profiles
createOrgAAMWProfile
Update an organization Advanced Anti Malware profile's Sky ATP verdict threshold, actions, or file-category rules.
Authorization<token>
Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.
Format:
Authorization: Token {apitoken}
Notes:
- An API token generated for a specific admin has the same privileges as that admin
- An API token is automatically removed if it is not used for more than 90 days
- SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.
In: header
Path Parameters
org_id*string
Format
uuidaamwprofile_id*string
Format
uuidRequest Body
application/json
Request Body
Advanced Anti Malware profile that controls Sky ATP file verdict handling
categories?array<>
File categories evaluated by this Advanced Anti Malware profile
fallback_action?aamw_profile_action
Action to take when Sky ATP cannot obtain a malware verdict. enum: block, permit.
Default
"block"Value in
- "block"
- "permit"
file_action?aamw_profile_action
Action to take when Sky ATP cannot obtain a malware verdict. enum: block, permit.
Default
"block"Value in
- "block"
- "permit"
name?string
Display name of the Advanced Anti Malware profile
verdict_threshold?integer
Minimum Sky ATP verdict score that triggers the configured file action
Range
1 <= value <= 10Default
8Response Body
curl -X PUT "https://example.com/api/v1/orgs/000000ab-00ab-00ab-00ab-0000000000ab/aamwprofiles/000000ab-00ab-00ab-00ab-0000000000ab" \ -H "Content-Type: application/json" \ -d '{ "categories": [ { "category": "executable", "hash_lookup_only": false } ], "fallback_action": "block", "file_action": "block", "name": "aamw-custom", "verdict_threshold": 8 }'{ "categories": [ { "category": "executable", "hash_lookup_only": false } ], "fallback_action": "block", "file_action": "block", "name": "aamw-custom", "verdict_threshold": 8}