Get Alert Attachment - BlinkOps Documentation

Retrieve the specified attachment of an alert.

Parameters

Parameter	Description
Alert Reference ID	The reference ID of the alert the attachment belongs to. Can be obtained by using the `List Alerts` action.
Attachment ID	The ID of the attachment to retrieve. Can be retrieved using the `List Alerts` action from the `Cyberint.Alert.attachments.id` field.

Example Output

{
	"File": {
		"EntryID": "1071@01674117-479d-4af5-89d6-cbf4584ae0e8",
		"Extension": "png",
		"Info": "image/png",
		"MD5": "1bcab0883881e84802d859baea3810f5",
		"Name": "Compromised Account As Appears On Argos.png",
		"SHA1": "a232483be0ff6f912a2367e96c399dc311c8cfb1",
		"SHA256": "635d7c00bb5f11f13b2fd2cab1b352c45f758467b7a00fed13e2d4669c83f35d",
		"SHA512": "72128496b305dbd9e2e916bb92feea6314cfc9990da0ffbdf6364c8676ea5b681ab01c9f5ee97b9e5ec22999bf5795ed3424517ffbf6f0ad8455a4c2cce5e60c",
		"SSDeep": "768:FYCj7zNaryIJPjoLRRQeD6hFvqvWOu5sUzdVL9EfNj0Aof:FpnNKyMPjoLzQE+DHVhoNj1of",
		"Size": 35665,
		"Type": "PNG image data, 711 x 531, 8-bit/color RGB, non-interlaced"
	}
}

Workflow Library Example

Get Alert Attachment with Cyberint and Send Results Via Email

Preview this Workflow on desktop

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example