To learn more, visit the Cisco Advanced Phishing Protection documentation.

​
Parameters​

ParameterDescription
Advanced SearchSearch using the advanced search syntax.
End DateThe latest date time a search should target. Current date as default.
LimitThe amount of records to be returned.
OffsetThe offset of the returned records.
Start DateThe earliest date time a search should target. Current date as default.

​
Example Output​

[    {        "authenticity": 0,        "date": "2024-01-29T20:55:39.492Z",        "domain_reputation": 0,        "from": "user@example.com",        "from_domain": "example.com",        "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",        "mail_from": "user@example.com",        "message_id": "string",        "message_trust_score": 0,        "reply_to": "user@example.com",        "sbrs": "string",        "uris": [            "string"        ],        "subject": "string",        "timestamp_ms": 0,        "to": "string",        "attachment_extensions": [            "string"        ],        "attachment_filenames": [            "string"        ],        "attachment_sha256": [            "string"        ],        "attachment_types": [            "string"        ],        "attack_types": [            "string"        ],        "dkim_result": "string",        "dmarc_result": "string",        "domain_dmarc_policy": "string",        "domain_tags": [            "string"        ],        "enforcement_action": "string",        "enforcement_folder": "string",        "enforcement_result": "string",        "expanded_from": "user@example.com",        "forwarded_from": "user@example.com",        "has_attachment": true,        "has_malicious_attachment": true,        "ip": "string",        "message_details_link": "string",        "org_domain": "example.com",        "policy_ids": [            0        ],        "ptr_name": "string",        "message_read_status": true,        "sender_approval_state": "string",        "sender_type": "string",        "spf_result": "string"    }]

​
Workflow Library Example​

List Messages with Cisco Advanced Phishing Protection and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

Get UserList Policy Events