diff --git a/docs/REST API/rest-api.md b/docs/REST API/rest-api.md index 22c978b59a..cefc281db6 100644 --- a/docs/REST API/rest-api.md +++ b/docs/REST API/rest-api.md @@ -4774,6 +4774,7 @@ A `fleet_id` of `0` returns the statistics for hosts that are "Unassigned". A `n | min_cvss_score | integer | query | _Available in Fleet Premium_. Filters to include only software with vulnerabilities that have a CVSS version 3.x base score higher than the specified value. | | max_cvss_score | integer | query | _Available in Fleet Premium_. Filters to only include software with vulnerabilities that have a CVSS version 3.x base score lower than what's specified. | | exploit | boolean | query | _Available in Fleet Premium_. If `true`, filters to only include software with vulnerabilities that have been actively exploited in the wild (`cisa_known_exploit: true`). Default is `false`. | +| macos_applications | boolean | query | If `true`, filters to only include software at the top level of the `/Applications` folder. This parameter applies only to macOS hosts, and is ignored for hosts on other platforms. Default is `false`. | | after | string | query | The value to get results after. This needs `order_key` defined, as that's the column that would be used. | On macOS hosts, `last_opened_at` is supported for software from the `apps` source and is the last open time of the most recently installed version of the software. After an update, it may be empty until the software is opened again.