Get details of a threat.

External Documentation

To learn more, visit the Abnormal documentation.

​
Parameters

ParameterDescription
Threat IDThe ID representing the threat. Can be retrieved from the ‘List Threats’ action.

​
Example Output

{
	"threatId": "184712ab-6d8b-47b3-89d3-a314efef79e2",
	"messages": [
		{
			"threatId": "184712ab-6d8b-47b3-89d3-a314efef79e2",
			"abxMessageId": 4551618356913732000,
			"abxPortalUrl": "https://portal.abnormalsecurity.com/home/threat-center/remediation-history/4551618356913732076",
			"subject": "Phishing Email",
			"fromAddress": "support@secure-reply.org",
			"fromName": "Support",
			"senderDomain": "secure-reply.org",
			"toAddresses": "example@example.com, another@example.com",
			"recipientAddress": "example@example.com",
			"receivedTime": "2020-06-09T17:42:59Z",
			"sentTime": "2020-06-09T17:42:59Z",
			"internetMessageId": "<5edfca1c.1c69fb81.4b055.8fd5@mx.google.com>",
			"remediationStatus": "Auto Remediated",
			"attackType": "Extortion",
			"attackStrategy": "Name Impersonation",
			"returnPath": "support@secure-reply.org",
			"replyToEmails": [
				"reply-to@example.com"
			],
			"ccEmails": [
				"cc@example.com"
			],
			"senderIpAddress": "100.101.102.103",
			"impersonatedParty": "None / Others",
			"attackVector": "Text",
			"attachmentNames": [
				"attachment.pdf"
			],
			"attachmentCount": 0,
			"urls": [
				"https://www.google.com/"
			],
			"urlCount": 0,
			"summaryInsights": [
				"Bitcoin Topics",
				"Personal Information Theft",
				"Unusual Sender"
			],
			"remediationTimestamp": "2020-06-09T17:42:59Z",
			"isRead": true,
			"attackedParty": "VIP",
			"autoRemediated": true,
			"postRemediated": false
		}
	],
	"pageNumber": 1,
	"nextPageNumber": 2
}

​
Workflow Library Example

Get Threat with Abnormal and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

Get Case AnalysisGet Threat Attachments