Show Threat Protections - BlinkOps Documentation

Retrieve a list of threat protections with optional filtering.

External DocumentationTo learn more, visit the Check Point Management documentation.

Parameters

Parameter	Description
Details Level	The level of details to include in the response.
Domains To Process	A comma-separated list of domains to process. This must be run from the system domain with `ignore-warning` set to true.
Filter	The search expression to filter the threat protections by.
Limit	The maximum number of results to return in the response. Valid range is - `1` to `500`.
Offset	The pagination offset indicating the starting point for the next set of results.
Order	A JSON list of fields and their sorting order. Example: `[ { “name”: “ASC” }, { “createdAt”: “DESC” } ]`
Return All Pages	Automatically fetch all resources, page by page.
Show Capture Packets And Track	Select to calculate and include the `capture packets` and `track` fields in the response.
Show Ips Additional Properties	Select to calculate and include the `IPS additional properties` field in the response.
Show Profiles	Select to calculate and include the `profiles` field in the response.

Example Output

{
	"from": 1,
	"protections": [
		{
			"name": "Adobe Acrobat Reader Memory Corruption (APSB20-13: CVE-2020-3795)",
			"uid": "1954b42d-20b6-9815-4638-301530263660",
			"type": "threat-protection"
		}
	],
	"to": 1,
	"total": 1
}

Workflow Library Example

Show Threat Protections with Check Point Management and Send Results Via Email

Preview this Workflow on desktop