New REST API for Automation Support
All visible data in the global threat alerts dashboard is now available to you through a new REST API. You can use it to download the content of a single alert, and even automate the whole data-collection process by streaming all your alerts to a third-party SIEM in your network.
The API is not read-only; you're able to change the configuration of your global threat alerts environment. For example, you can increase the specific business value of a critical asset group or change the severity assigned to a threat.
To see the API possibilities, refer to https://api.cta.eu.amp.cisco.com. There you can find the specification and use cases which describe the API possibilities in more detail and example scripts for additional integration.
To read more about the new REST API, see global threat alerts REST API is now released!