Documentation Index
Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
Use this file to discover all available pages before exploring further.
Retrieve the specified attachment of an alert.
Parameters
| Parameter | Description |
|---|
| Alert Reference ID | The reference ID of the alert the attachment belongs to. Can be obtained by using the List Alerts action. |
| Attachment ID | The ID of the attachment to retrieve. Can be retrieved using the List Alerts action from the Cyberint.Alert.attachments.id field. |
Example Output
{
"File": {
"EntryID": "1071@01674117-479d-4af5-89d6-cbf4584ae0e8",
"Extension": "png",
"Info": "image/png",
"MD5": "1bcab0883881e84802d859baea3810f5",
"Name": "Compromised Account As Appears On Argos.png",
"SHA1": "a232483be0ff6f912a2367e96c399dc311c8cfb1",
"SHA256": "635d7c00bb5f11f13b2fd2cab1b352c45f758467b7a00fed13e2d4669c83f35d",
"SHA512": "72128496b305dbd9e2e916bb92feea6314cfc9990da0ffbdf6364c8676ea5b681ab01c9f5ee97b9e5ec22999bf5795ed3424517ffbf6f0ad8455a4c2cce5e60c",
"SSDeep": "768:FYCj7zNaryIJPjoLRRQeD6hFvqvWOu5sUzdVL9EfNj0Aof:FpnNKyMPjoLzQE+DHVhoNj1of",
"Size": 35665,
"Type": "PNG image data, 711 x 531, 8-bit/color RGB, non-interlaced"
}
}
Workflow Library Example
Get Alert Attachment with Cyberint and Send Results Via Email
