Skip to main content
Retrieve the specified attachment of an alert.

​
Parameters

ParameterDescription
Alert Reference IDThe reference ID of the alert the attachment belongs to. Can be obtained by using the List Alerts action.
Attachment IDThe ID of the attachment to retrieve. Can be retrieved using the List Alerts action from the Cyberint.Alert.attachments.id field.

​
Example Output

{
	"File": {
		"EntryID": "1071@01674117-479d-4af5-89d6-cbf4584ae0e8",
		"Extension": "png",
		"Info": "image/png",
		"MD5": "1bcab0883881e84802d859baea3810f5",
		"Name": "Compromised Account As Appears On Argos.png",
		"SHA1": "a232483be0ff6f912a2367e96c399dc311c8cfb1",
		"SHA256": "635d7c00bb5f11f13b2fd2cab1b352c45f758467b7a00fed13e2d4669c83f35d",
		"SHA512": "72128496b305dbd9e2e916bb92feea6314cfc9990da0ffbdf6364c8676ea5b681ab01c9f5ee97b9e5ec22999bf5795ed3424517ffbf6f0ad8455a4c2cce5e60c",
		"SSDeep": "768:FYCj7zNaryIJPjoLRRQeD6hFvqvWOu5sUzdVL9EfNj0Aof:FpnNKyMPjoLzQE+DHVhoNj1of",
		"Size": 35665,
		"Type": "PNG image data, 711 x 531, 8-bit/color RGB, non-interlaced"
	}
}

​
Workflow Library Example

Get Alert Attachment with Cyberint and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop