Get Case Analysis - BlinkOps Documentation

Provides the analysis and timeline details of a case.

External DocumentationTo learn more, visit the Abnormal documentation.

Parameters

Parameter	Description
Case ID	The ID representing the case. Can be retrieved from the ‘List Cases’ action.

Example Output

{
	"insights": [
		{
			"signal": "<string>",
			"description": "<string>"
		},
		{
			"signal": "<string>",
			"description": "<string>"
		}
	],
	"eventTimeline": [
		{
			"event_timestamp": "<string>",
			"category": "<string>",
			"title": "<string>",
			"platform": "<string>",
			"field_labels": {},
			"ip_address": "<string>",
			"location": {
				"city": "<string>",
				"state": "<string>",
				"country": "<string>"
			}
		},
		{
			"event_timestamp": "<string>",
			"category": "<string>",
			"title": "<string>",
			"platform": "<string>",
			"field_labels": {},
			"ip_address": "<string>",
			"location": {
				"city": "<string>",
				"state": "<string>",
				"country": "<string>"
			}
		}
	]
}

Workflow Library Example

Get Case Analysis with Abnormal and Send Results Via Email

Preview this Workflow on desktop

Get Case Get Threat

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example