Explore a Sonar target

Resolve the program

If the program ID is unknown, search first:

list_programs { search: "example" }

Use platform and search filters to disambiguate the result. Do not guess an ID from the display name. If the ID is already supplied by a trusted context, skip directly to the overview.

Map Inventory cheaply

get_target_overview { programId: "<program UUID>" }

Read:

• program identity and platform;
• current scopes and whether the intended boundary is represented; and
• counts by asset type.

The overview is a planning call, not a complete asset export. Use its counts to decide which lists are worth paging.

Drill into useful assets

• Start with list_http_paths for live endpoints, status, response length, and discovery source.
• Use list_ports to map network services, optionally narrowed by IP.
• Use list_domains and list_ip_addresses to establish the surface and pivots.
• Use list_technologies, get_http_path_technologies, and get_port_technologies to inspect fingerprints.
• Use list_mobiles, list_wildcards, and list_cidrs when the target overview shows those boundary types.

Page results instead of requesting a very large limit. Narrow by scopeId, parent asset, search, or updatedAfter when the tool supports it.

Verify the decision

Before stopping or requesting new work, record:

• the program and optional scope used;
• which asset types and pages were actually read;
• the freshness filter, if any; and
• what is missing or stale enough to justify a scan.