External DocumentationTo learn more, visit the Agari Phishing Response documentation.
Basic Parameters
| Parameter | Description |
|---|---|
| End Date | The end date of the investigation. Defaults to now. |
| Filter | Search filter that is applied on the results. |
| Sort | Sort the returning results. |
| Start Date | The start date of the investigation. Defaults to 24 hours ago. |
Advanced Parameters
| Parameter | Description |
|---|---|
| Assignee | The user ID of the investigation’s assignee. |
| Classification | The classification of the investigation. |
| From | The full email from of the phish message of the investigation. |
| From Domain | The domain of the phish message of the investigation. |
| Limit | Limit the number of results. |
| Offset | The offset of the results. |
| Priority | The priority of the investigation. |
| Source Type | The source type of the investigation. |
| Tags | Filter by the IDs of the tags of the investigation. Multiple tags can be passed in a comma separated list. |
Example Output
{
"assignee": {
"email": "string",
"full_name": "string",
"id": 0
},
"classification": "string",
"created_at": "2024-02-18T07:03:45.469Z",
"from": "string",
"from_domain": "string",
"id": 0,
"indicators": {
"domain": {
"malicious": true,
"malicious_count": 0,
"total_count": 0,
"summary": {
"additionalProp": "string"
}
},
"ip": {
"malicious": true,
"malicious_count": 0,
"total_count": 0,
"summary": {
"additionalProp": "string"
}
},
"uri": {
"malicious": true,
"malicious_count": 0,
"total_count": 0,
"summary": {
"additionalProp": "string"
}
},
"attachment": {
"malicious": true,
"malicious_count": 0,
"total_count": 0,
"summary": {
"additionalProp": "string"
}
},
"agari_msg_risk": {
"malicious": true,
"malicious_count": 0,
"total_count": 0,
"summary": {
"additionalProp": "string"
}
}
},
"investigation_portal_link": "string",
"priority": "string",
"reported_at": "2024-02-18T07:03:45.469Z",
"reported_by": "string",
"source_type": "string",
"state": "string",
"subject": "string",
"tag_ids": [
0
],
"updated_at": "2024-02-18T07:03:45.469Z",
"user_id": 0
}
Workflow Library Example
List Investigations with Agari Phishing Response and Send Results Via Email