Qualys Cloud Platform 3.6.1 (FIM) API notification 1

A new release of Qualys Cloud Platform File Integrity Monitoring (FIM) 3.6.1 includes an updated API which is targeted for release in January 2023. The specific day will differ depending on the platform. See platform release dates on the Qualys Status page. This API notification provides an early preview into the coming API, allowing you to identify use cases that can leverage this updated API.

What’s New
Incident API: New Values for Approve Parameter
/fim/v3/incidents/{incidentId}/approve
We have now introduced new values for input parameters like approvalStatus, changeType, dispositionCategory. Using the additional values, you can now get the pending status, you can change type of incidents and have more options in disposition category.

Create Correlation Rules: Email ID Support for Reviewers
/fim/v3/autocorrelation/rules/create
Use this API to create correlation rules. You can now add email IDs also in the reviewer field.

Update Correlation Rules: Email ID Support for Reviewers
/fim/v3/autocorrelation/rules/{autoCorrelationRuleId}/update
Use this API to update correlation rules. You can now add email IDs also in the reviewer field.

Create Manual Incident: Email ID Support for Reviewers
/fim/v3/incidents/create
Use this API to create manual incidents of type “DEFAULT”. You can now add email IDs also in the reviewer field.

The release notes are here: https://www.qualys.com/docs/release-notes/qualys-file-integrity-monitoring-3.6.1-api-release-notes.pdf