Basic Parameters
| Parameter | Description |
|---|---|
| Alert Severity | Select the alert severity levels to filter the results by. |
| Alert Status | Select the alert statuses to filter the results by. |
| Alert Type | Select the alert types to filter the results by. |
| Page | The page number of results to retrieve. |
| Page Size | The maximum number of items to return per page. Note: The possible range is 10 - 100. |
| Return All Pages | Automatically fetch all resources, page by page. |
Advanced Parameters
| Parameter | Description |
|---|---|
| Created Date From | Filter results that were created after the selected date. |
| Created Date To | Filter results that were created before the selected date. |
| Environments | A comma-separated list of the alert creation environments. |
| Modification Date From | Filter results that were modified after the selected date. |
| Modification Date To | Filter results that were modified before the selected date. |
| Updated Date From | Filter results that were updated after the selected date. |
| Updated Date To | Filter results that were updated before the selected date. |
Example Output
{
"alerts": [
{
"acknowledged_by": null,
"acknowledged_date": null,
"alert_data": {
"csv": [
{
"password": "Carroza1947",
"username": "cabuneta47"
}
],
"hashed_attachment_content_csv": "e461",
"total_credentials": 1
},
"analysis_report": null,
"attachments": [
{
"id": 18,
"mimetype": "image/png",
"name": "Compromised Account As Appears On Argos.png"
}
],
"category": "data",
"closed_by": null,
"closure_date": null,
"closure_reason": null,
"confidence": 100,
"created_by": {
"email": "avital@cyberint.com"
},
"created_date": "2021-04-12T00:01:12",
"csv_data": {
"csv_id": 1981,
"name": "Company Customer Credentials Exposed.csv"
},
"description": "text",
"environment": "Argos Demo",
"impacts": [
"data_compromise",
"unauthorized_access",
"account_takeover",
"revenue_loss",
"brand_degradation",
"customer_churn",
"financial_penalties"
],
"iocs": [],
"modification_date": "2021-04-12T00:01:12",
"publish_date": "2020-11-23T17:44:42",
"recommendation": "text",
"ref_id": "ARG-3",
"related_entities": [],
"severity": "high",
"source": "argos.1",
"source_category": "antivirus_repository",
"status": "open",
"tags": [],
"targeted_brands": [
"Chase"
],
"targeted_vectors": [
"customer"
],
"threat_actor": "",
"ticket_id": null,
"title": "Company Customer Credentials Exposed",
"type": "compromised_customer_credentials"
}
]
}
Workflow Library Example
List Alerts with Cyberint and Send Results Via Email