Get Observable Details - BlinkOps Documentation

Get the details of an observable object. Required scopes: enrich/observables/deliberate:read

External DocumentationTo learn more, visit the Cisco Talos documentation.

Parameters

Parameter	Description
Object Type	The type of the observable to get details of. Can be retrieved from the ‘Get Observable Type’.
Object Value	The value of the observable to get details of. (Could be an IP, domain, email, hash, etc.)

Example Output

{
	"data": [
		{
			"module": "Sample Module",
			"module_instance_id": "da033b3c-81da-4118-b73a-f03feb3adecf",
			"module_type_id": "c84f54db-c187-4cab-8751-2b39b007ee55",
			"data": {
				"verdicts": {
					"count": 2,
					"docs": [
						{
							"type": "verdict",
							"disposition": 2,
							"observable": {
								"value": "https://ilo.brenz.pl/",
								"type": "url"
							},
							"disposition_name": "Malicious",
							"valid_time": {
								"start_time": "2023-02-09T13:36:23.410Z",
								"end_time": "2023-03-11T13:36:23.410Z"
							}
						},
						{
							"type": "verdict",
							"disposition": 2,
							"observable": {
								"value": "http://ilo.brenz.pl/favicon.ico/",
								"type": "url"
							},
							"disposition_name": "Malicious",
							"valid_time": {
								"start_time": "2023-02-09T13:36:23.420Z",
								"end_time": "2023-03-11T13:36:23.420Z"
							}
						}
					]
				}
			}
		}
	]
}

Workflow Library Example

Get Observable Details with Cisco Talos and Send Results Via Email

Preview this Workflow on desktop

Cisco Talos Custom Action Get Observable Type

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example