Thread Info
  • State Not Answered
  • Replies 1 reply
  • Subscribers 9 subscribers
  • Views 1846 views
  • Users 0 members are here
Options
Suggested

Check MDR status of tenant / customer using API

ll-ben

Hi everyone,

Partner here. I am currently facing a challenge and would appreciate any insights or guidance you can provide.

Trying to figure out if a customer/tenant is using Sophos MDR just by using API calls, but hitting a wall. Any tricks or ideas that have worked for you? It should work with both, termed and monthly customers.

Thank you in advance for your time and support!

Regards,

Ben



Added tags
[edited by: Gladys at 2:50 PM (GMT -8) on 1 Jan 2024]
  • 0

    Hey everyone,

    Just dropping a quick update. I've found a workaround that might be useful for those dealing with a similar situation.

    Here's the breakdown:

    I took the response from this API call: https://developer.sophos.com/docs/endpoint-v1/1/routes/endpoints/get

    Went through it, checking if any computers have Sophos MDR installed based on their assignedProducts. Keep an eye out for the product called "mtr" in the assignedProducts list; it's not "mdr" due to its past, having been known as "mtr" before being renamed to mdr.

    It's not a perfect solution, and I won't label it as such, but until Sophos comes up with a suitable API endpoint, it gets the job done. If a customer does not have MDR, it won't show up in the assignedProducts list (as far as I cant tell...)

    Here's an example JSON object to look for in the assignedProducts list:

    {
  "code": "mtr",
  "version": "2022.1.0.57",
  "status": "installed"
}

    If you have your own methods or suggestions, I'm all ears!

    Cheers, Ben

Unfiltered HTML