Skip to main content
Get the IPs of an investigation by a given id.
External DocumentationTo learn more, visit the Agari Phishing Response documentation.

​
Basic Parameters

ParameterDescription
FieldsComma-delimited list of fields to include in the payload.
Investigation IDThe ID of the investigation. Can be obtained by the List Investigations action.

​
Advanced Parameters

ParameterDescription
Add FieldsA comma-delimited list of optional fields to add to the default payload. See Agari’s Fields Language for more information.
LimitLimit the number of results.
OffsetThe offset of the results.
Remove FieldsA comma-delimited list of optional fields to remove to the default payload. See Agari’s Fields Language for more information.

​
Example Output

{
	"ip": "string",
	"ip_type": "string",
	"verdict": "string",
	"ptr": "string",
	"sbrs": {
		"additionalProp": "string"
	},
	"sender": "string",
	"scans": {
		"error": "string",
		"provider": "string",
		"result": {
			"additionalProp": "string"
		},
		"scanned_at": "2024-02-18T07:03:45.469Z",
		"score": "string",
		"status": "string",
		"type": "string",
		"verdict": "string"
	}
}

​
Workflow Library Example

Get Investigation Ips with Agari Phishing Response and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop