Get Investigation Attachments - BlinkOps Documentation

Get the attachments of an investigation by a given id.

External DocumentationTo learn more, visit the Agari Phishing Response documentation.

Basic Parameters

Parameter	Description
Fields	Comma-delimited list of fields to include in the payload.
Investigation ID	The ID of the investigation. Can be obtained by the List Investigations action.

Advanced Parameters

Parameter	Description
Add Fields	A comma-delimited list of optional fields to add to the default payload. See Agari’s Fields Language for more information.
Limit	Limit the number of results.
Offset	The offset of the results.
Remove Fields	A comma-delimited list of optional fields to remove to the default payload. See Agari’s Fields Language for more information.

Example Output

{
	"hash_sha256": "string",
	"verdict": "string",
	"scans": {
		"error": "string",
		"provider": "string",
		"result": {
			"additionalProp": "string"
		},
		"scanned_at": "2024-02-18T07:03:45.469Z",
		"score": "string",
		"status": "string",
		"type": "string",
		"verdict": "string"
	}
}

Workflow Library Example

Get Investigation Attachments with Agari Phishing Response and Send Results Via Email

Preview this Workflow on desktop