List all detection rule tags

GET /api/detection_engine/tags

List all unique tags from all detection rules.

200 application/json

Indicates a successful call

String array containing words and phrases to help categorize, filter, and search rules. Defaults to an empty array.

GET /api/detection_engine/tags

curl \
 --request GET 'http://localhost:5601/api/detection_engine/tags' \
 --user "username:password"

Response examples (200)

[
  "zeek",
  "suricata",
  "windows",
  "linux",
  "network",
  "initial access",
  "remote access",
  "phishing"
]