List USB device connection events

POST

/devices/usb-connections

Query and filter USB device connection events. These events track when USB devices
are connected to devices in your environment, including device identification and risk assessment.

Relations:

device (Device): The device where the USB connection occurred

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

Successful operation

Body

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST '/devices/usb-connections' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "distinct_count": "string",
    "include_total_count": true,
    "limit": 10,
    "offset": 0,
    "query": "name='\''WINPC-4291'\'' AND status IN ('\''active'\'', '\''pending'\'')",
    "sort": "name desc, id"
}'

Response Example

{
    "distinct_values": [
        {
            "count": 0,
            "value": null
        }
    ],
    "pagination": {
        "count": 0,
        "total_count": 1000
    },
    "items": [
        {
            "connection_count": 5,
            "device_instance_id": "USB\\VID_1050&PID_0407\\serial&2",
            "device_serial_number": "123456789",
            "device_type": "hid",
            "latest_connected_time": "2024-01-15T10:30:00Z",
            "manufacturer": "Yubico",
            "product_id": 1031,
            "product_name": "YubiKey OTP+FIDO+CCID",
            "risk_level": 0,
            "vendor_id": 4176
        }
    ]
}

Modified at 2026-03-31 19:29:10

Get a device

Get a USB connection event