A REST endpoint is a reference to a uniform resource identifier (URI) that accepts web requests. Your application polls an endpoint, such as https://api.lookout.com/events, and retrieves a sequence of event objects. Events are comprised of a set of base fields that are present for every event type and one or more sub-blocks of type-specific fields.

The Mobile Risk API supports three event types:

• Threat state change events: These occur when threats are detected or remediated on a device. For example, an Adware detection and removal would each trigger a Threat State change event.
• Device state change events: These occur when a device's state changes between Activated, Protected, or Secured.
• Audit events: These occur when an MES Console Administrator accesses the console and takes actions, such as modifying Connector settings, creating a new custom Policy, adding a new Administrator, creating a tenancy, etc.