# EDR Connector: Accessed Provider APIs

The following APIs are accessed by the EDR connector.

## Microsoft Defender

| Synqly API | Provider API |
|  --- | --- |
| DELETE /v1/edr/iocs | POST /api/indicators/batchdelete |
| GET /v1/edr/alerts | GET /api/alerts |
| GET /v1/edr/endpoints | GET /api/machines |
| GET /v1/edr/iocs | GET /api/indicators |
| GET /v1/edr/posture_score | GET /api/machines |
| GET /v1/edr/threats | GET /api/incidents |
| POST /v1/edr/iocs | POST /api/indicators |


## Tanium EDR

| Synqly API | Provider API |
|  --- | --- |
| GET /v1/edr/alerts | GET /plugin/products/threat-response/api/v1/alerts |
| GET /v1/edr/applications | POST /plugin/products/gateway/graphql |
| GET /v1/edr/endpoints | POST /plugin/products/gateway/graphql |
| GET /v1/edr/posture_score | POST /plugin/products/gateway/graphql |


## SentinelOne Endpoint

| Synqly API | Provider API |
|  --- | --- |
| DELETE /v1/edr/iocs | DELETE /web/api/v2.1/threat-intelligence/iocsGET /web/api/v2.1/threat-intelligence/iocs |
| GET /v1/edr/alerts | GET /web/api/v2.1/cloud-detection/alerts |
| GET /v1/edr/applications | GET /web/api/v2.1/application-management/inventory |
| GET /v1/edr/edr_events | POST /api/query |
| GET /v1/edr/endpoints | GET /web/api/v2.1/agents |
| GET /v1/edr/iocs | GET /web/api/v2.1/threat-intelligence/iocs |
| GET /v1/edr/threats | GET /web/api/v2.1/threats |
| POST /v1/edr/iocs | POST /web/api/v2.1/threat-intelligence/iocs |