Hardening

#Hardening overview

Address

https://<your-org>.brambleit.cloud/warden/api/baseline

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Response 200

{
  "…o": "…",
  "enabled": true,
  "can_manage": true
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline', {
  method: 'GET',
  credentials: 'include',
});
const data = await res.json();

#Opt-in: Hardening checks run only for organisations that turned it on

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/enable

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.
Permission (any of): warden.directory.manage.

Request body JSON

Response 200

{
  "enabled": true,
  "queued": null
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/enable', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"on":"…"}),
});
const data = await res.json();

#The Hardening policy: which rules, per device type, and applying it to a domain as GPOs

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/policy

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Response 200

{
  "…await policy.view(T(req)": "…",
  "can_manage": true
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/policy', {
  method: 'GET',
  credentials: 'include',
});
const data = await res.json();

#Update the hardening policy

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/policy

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.
Permission (any of): warden.directory.manage.

Response 200

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/policy', {
  method: 'PUT',
  credentials: 'include',
});
const data = await res.json();

#Apply the hardening policy to a domain as Group Policy

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/policy/apply

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.
Permission (any of): warden.directory.manage.

Request body JSON

Response 200

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/policy/apply', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"domain":"string"}),
});
const data = await res.json();

#Undo a Group Policy apply

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/policy/applies/:id/undo

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.
Permission (any of): warden.directory.manage.

Path parameters

Response 200

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/policy/applies/12.5/undo', {
  method: 'POST',
  credentials: 'include',
});
const data = await res.json();

#Hardening by platform

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/platforms

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Response 200

{
  "…await views.summary(T(re": "…",
  "can_manage": true
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/platforms', {
  method: 'GET',
  credentials: 'include',
});
const data = await res.json();

#One platform's rules and devices

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/platforms/:os

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Path parameters

Response 200

{
  "…await views.platform(T(r": "…",
  "can_manage": true
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/platforms/string', {
  method: 'GET',
  credentials: 'include',
});
const data = await res.json();

#Get a hardening rule

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/rules/:id

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Path parameters

Response 200

{
  "…await views.rule(T(req),": "…",
  "can_manage": true
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/rules/42', {
  method: 'GET',
  credentials: 'include',
});
const data = await res.json();

#Add rules to the policy, or take them out, for some device types

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/policy/rules

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.
Permission (any of): warden.directory.manage.

Request body JSON

Response 200

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/policy/rules', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"rule_ids":[],"profiles":[],"on":false}),
});
const data = await res.json();

#Apply the policy now on one platform's devices outside a domain (Warden fixes them itself)

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/policy/apply-now

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.
Permission (any of): warden.directory.manage.

Request body JSON

Response 200

Errors

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/policy/apply-now', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"os":"windows","device_ids":[],"profile":"string","rule_ids":[]}),
});
const data = await res.json();

#A device's hardening results

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/devices/:id

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Path parameters

Response 200

Errors

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/devices/42', {
  method: 'GET',
  credentials: 'include',
});
const data = await res.json();

#A Linux device's type (server / workstation) by hand, or null for detected

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/devices/:id/type

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.
Permission (any of): warden.directory.manage.

Path parameters

Request body JSON

Response 200

{
  "message": "Saved"
}

Errors

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/devices/42/type', {
  method: 'PUT',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"profile":"…"}),
});
const data = await res.json();

#Check devices against the baseline now

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/check

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Request body JSON

Response 200

{
  "queued": null
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/check', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"device_ids":[]}),
});
const data = await res.json();

#Plan hardening fixes

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/plan

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Request body JSON

Response 200

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/plan', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"device_ids":[],"rule_ids":[]}),
});
const data = await res.json();

#Apply planned hardening fixes

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/apply

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Request body JSON

Response 200

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/apply', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"items":[]}),
});
const data = await res.json();

#Undo hardening fixes on a device

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/undo

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Request body JSON

Response 200

Errors

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/undo', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"device_id":7,"rule_ids":[]}),
});
const data = await res.json();

#The Hardening policy as a script a domain admin can run instead of Apply

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/standard

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Query parameters

Response

A body.

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/standard', {
  method: 'GET',
  credentials: 'include',
});
const data = await res.json();

#The standard on Windows devices outside a domain (applied by Warden)

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/local-standard

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Response 200

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/local-standard', {
  method: 'GET',
  credentials: 'include',
});
const data = await res.json();

#Set the standard for devices outside a domain

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/local-standard

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.
Permission (any of): warden.directory.manage.

Request body JSON

Response 200

{
  "message": "Saved"
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/local-standard', {
  method: 'PUT',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"os":"…","enabled":true,"scope_type":"all","scope_ids":[],"platforms":[],"include_strict":"…"}),
});
const data = await res.json();

#Add a hardening exception

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/exceptions

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Request body JSON

Response 200

{
  "message": "Saved"
}

Errors

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/exceptions', {
  method: 'PUT',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"device_id":"string","rule_id":7,"reason":"string"}),
});
const data = await res.json();

#Remove a hardening exception

Address

https://<your-org>.brambleit.cloud/warden/api/baseline/exceptions

Requires

Signed-in browser session (the sso_session / session_id cookies from Bramble sign-in).
Licence: Warden.

Request body JSON

Response 200

{
  "message": "Saved"
}

Example request

// From a page served by Bramble (uses the signed-in session)
const res = await fetch('/warden/api/baseline/exceptions', {
  method: 'DELETE',
  credentials: 'include',
});
const data = await res.json();