Returns the child process application group and its rules

Returns the child process application group containing parent-process control rules, including each rule's appRuleID. Use the returned appRuleID values in the removedRules array when calling Update Child Process Group.

Endpoints

get /dcapi/appctrl/childProcessGroup

Copy full URL

Request URL

https://{server-hostname}:8383/dcapi/appctrl/childProcessGroup

Scope

AppControl.READCopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomain/dcapi/appctrl/childProcessGroup \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/dcapi/appctrl/childProcessGroup"))
        .header("Authorization", " d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

headers = { 'Authorization': " d92d4xxxxxxxxxxxxx15f52" }

conn.request("GET", "/dcapi/appctrl/childProcessGroup", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/json");

    response = invokeUrl
    [
        url: "https://appDomain/dcapi/appctrl/childProcessGroup"
        type: GET
        headers: headersMap
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Authorization", " d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/dcapi/appctrl/childProcessGroup' -Method GET -Headers $headers

▼ Show full

Response Parameters

- HTTP code 200

Response Body - application/json

JSON object

Hide Sub-Attributes

customerIDstring

Customer identifier

groupIDstring

Unique identifier for the child process application group

createdBystring

User ID who created the group (-1 for system)

modifiedBystring

User ID who last modified the group (-1 for system)

platformIDinteger

Platform ID (1=Windows, 2=Mac)

appGroupTypeinteger

Type of application group (6=Child Process)

appGroupCategoryinteger

Category of the application group (0=Default)

descriptionstring

Description of the child process application group

applicationRulesJSON array

Array of application rules in the child process group

Show Sub-Attributes

JSON object

Show Sub-Attributes

appRuleTypeinteger

Rule type ID (1=Vendor, 2=Product, 3=Executable, 4=FileHash)

appRuleNamestring

Display name of the application rule

trustedUpdaterinteger

Trusted updater flag (0=No, 1=Yes)

ruleDetailsJSON object

Detailed attributes of the rule

Show Sub-Attributes

appRuleIDstring

Unique identifier for the application rule

isExistingboolean

Whether the rule already exists in the repository

isVerifiedinteger

Verification status (1=verified, 0=unverified)

displayNamestring

Display name of the product

productVendorIDstring

Unique identifier mapping product to vendor

vendorIDstring

Unique identifier of the software vendor

vendorNamestring

Name of the software vendor

displayIdstring

Display identifier for the product/vendor

productNamestring

Name of the software product

restrictChildElevationboolean

Whether child process elevation is restricted for this rule

addedRulesarray

Array of rules pending addition (empty on GET)

removedRulesarray

Array of rules pending removal (empty on GET)

applicationRuleCountinteger

Total count of application rules in the group

associatedCustomGroupCountinteger

Count of custom groups associated with this app group

appGroupNamestring

Name of the child process application group (e.g. Default_Child_Process_Group)

createdTimestring

Creation timestamp in milliseconds since epoch

modifiedTimestring

Last modification timestamp in milliseconds since epoch

jitRequestModeinteger

JIT request mode (0=Disabled, 1=Enabled, 2=Approval Required)

configSpecificAppEnabledboolean

Whether config-specific app elevation is enabled

defaultGroupResourcestring

Default group resource (null if not set)

clearExistingRulesboolean

Whether existing rules should be cleared

manualElevationEnabledboolean

Whether manual elevation is enabled

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

Child process application group with existing rules

Copied!

  {
    "modifiedTime": "1775478159555",
    "manualElevationEnabled": false,
    "appGroupName": "Default_Child_Process_Group",
    "configSpecificAppEnabled": false,
    "groupID": "901",
    "defaultGroupResource": null,
    "description": "",
    "platformID": 1,
    "addedRules": [],
    "clearExistingRules": false,
    "removedRules": [],
    "applicationRules": [
      {
        "appRuleType": 2,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "901",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "Brave Browser",
          "productVendorID": "314",
          "vendorID": "314",
          "vendorName": "Brave Software, Inc.",
          "displayId": "314",
          "productName": "Brave Browser",
          "restrictChildElevation": false
        },
        "appRuleName": ""
      },
      {
        "appRuleType": 2,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "903",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "Google Chrome",
          "productVendorID": "312",
          "vendorID": "312",
          "vendorName": "Google LLC",
          "displayId": "312",
          "productName": "Google Chrome",
          "restrictChildElevation": false
        },
        "appRuleName": ""
      },
      {
        "appRuleType": 2,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "904",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "Microsoft Edge",
          "productVendorID": "311",
          "vendorID": "311",
          "vendorName": "Microsoft Corporation",
          "displayId": "311",
          "productName": "Microsoft Edge",
          "restrictChildElevation": false
        },
        "appRuleName": ""
      },
      {
        "appRuleType": 2,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "905",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "Ulaa",
          "productVendorID": "315",
          "vendorID": "315",
          "vendorName": "ZOHO Corporation Private Limited",
          "displayId": "315",
          "productName": "Ulaa",
          "restrictChildElevation": false
        },
        "appRuleName": ""
      }
    ],
    "associatedCustomGroupCount": 0,
    "createdBy": "-1",
    "appGroupType": 6,
    "customerID": "1",
    "jitRequestMode": 0,
    "createdTime": "1775478159555",
    "modifiedBy": "-1",
    "appGroupCategory": 0,
    "applicationRuleCount": 5
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.