To learn more, visit the Cybersixgill documentation.

​
Basic Parameters​

ParameterDescription
Organization IDID of the organization that the alert belongs to. Required for multi-tenant organizations. Can be obtained using the List Organizations action.
Sort BySort by a field.
Sort OrderThe order by which to sort.
StatusThe status of the actionable alert.

​
Advanced Parameters​

ParameterDescription
Alert Type IDThe ID of the alert type.
From DateGet actionable alerts starting from this date.
Is ReadFilter by the read field.
LimitThe size of the page to fetch.
OffsetPagination offset.
Threat LevelThe threat level of the actionable alert.
Threat TypeThe threat type of the actionable alert.
To DateGet actionable alerts ending in this date.

​
Example Output​

[    {        "id": "testID",        "threat_level": "imminent",        "threats": [            "exploit",            "ddos"        ],        "title": "actionable alert title",        "content": "a lot of text",        "read": true,        "date": "2018-01-01 00:00:00",        "user_id": "#12:0",        "status": {            "name": "in_treatment",            "by_user": "#12:1"        }    }]

​
Workflow Library Example​

List Actionable Alerts with Cybersixgill and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

Get Organization ListCyCognito