is there a why we can pull only new detected vulns from fleet API ? in UI it shows detected 1 day/2 days before but in API i dont see any options to see if the vulns were dected in last 24 or 48 hours or exact timeline of detection

Hey @Ojas! Believe some of what you're looking for is behind a Fleet Premium additional "add-on". There is a Feature Request that will give a history of vulnerabilities. I might not completely understand the ask but, I might make a script or automation that hits the List Vulnerabilities endpoint on a given cadence. Then we could log those results to get a history of data/vulns.