Skip to main content
POST
/
api
/
v2
/
events
Create Event
curl --request POST \
  --url https://your-tenant.bloodhoundenterprise.io/api/v2/events \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "rrule": "<string>",
  "session_collection": true,
  "local_group_collection": true,
  "ad_structure_collection": true,
  "cert_services_collection": true,
  "ca_registry_collection": true,
  "dc_registry_collection": true,
  "all_trusted_domains": true,
  "ous": [
    "<string>"
  ],
  "domains": [
    "<string>"
  ]
}
'
{
  "data": {
    "id": 123,
    "client_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "rrule": "<string>",
    "session_collection": true,
    "local_group_collection": true,
    "ad_structure_collection": true,
    "cert_services_collection": true,
    "ca_registry_collection": true,
    "dc_registry_collection": true,
    "all_trusted_domains": true,
    "ous": [
      {
        "objectid": "<string>",
        "name": "<string>",
        "exists": true,
        "distinguishedname": "<string>",
        "type": "<string>"
      }
    ],
    "domains": [
      {
        "objectid": "<string>",
        "name": "<string>",
        "exists": true,
        "type": "<string>"
      }
    ]
  }
}

Documentation Index

Fetch the complete documentation index at: https://specterops-bp-2510-sharphound-collection.mintlify.app/llms.txt

Use this file to discover all available pages before exploring further.

Applies to BloodHound Enterprise only

Authorizations

​
Authorization
string
header
required

Authorization: Bearer $JWT_TOKEN

Headers

​
Prefer
string
default:wait=30

Prefer header, used to specify a custom timeout in seconds using the wait parameter as per RFC7240. Passing in wait=-1 bypasses all timeout limits when the feature is enabled.

Pattern: ^wait=(-1|[0-9]+)$

Body

application/json

The request body for creating an event

​
rrule
string
​
session_collection
boolean
​
local_group_collection
boolean
​
ad_structure_collection
boolean
​
cert_services_collection
boolean
​
ca_registry_collection
boolean
​
dc_registry_collection
boolean
​
all_trusted_domains
boolean
​
ous
string[]
​
domains
string[]

Response

OK

​
data
object