External DocumentationTo learn more, visit the Cyware Collaborate documentation.
Parameters
| Parameter | Description |
|---|---|
| Alert ID | The 8-character unique ID of the alert. Can be obtained using the List Alerts action. |
Example Output
{
"short_id": "685ca5d7",
"title": "New Malware Variant Targeting Enterprise Networks",
"content": "A newly discovered malware strain is actively exploiting vulnerabilities in enterprise networks, enabling unauthorized access and data exfiltration.",
"status": "PUBLISHED",
"tlp": "WHITE",
"card_group": [
{
"group_id": "79f0e834",
"group_name": "Security Analysts",
"group_tlp": "RED",
"group_type": "SYSTEM"
}
],
"individual_recipients": [
{
"user_id": "c995da56-2cd2-4bd2-8d0b-b28569250f89",
"name": "John Doe",
"email": "john.doe@exampleorg.com"
}
],
"recipient_groups": [
{
"group_id": "79f0e834",
"group_name": "Security Analysts",
"group_tlp": "RED",
"group_type": "SYSTEM"
}
],
"card_category": {
"category_id": "b4ee871c",
"category_name": "Incident Alert"
},
"card_info": "<b>Adversary:</b>, <br/> <b>Malware Families:</b> njRAT, AsyncRAT, Houdini RAT<br/> <b>Attack IDs:</b> T1104, T1547",
"info_source": [
{
"source_id": "5e5aa810",
"source_name": "RiskIQ"
}
],
"card_image": "sampleimage.jpeg",
"push_required": false,
"push_email_notification": false,
"published_time": 1703078077,
"optional_fields": {},
"indicators": {
"domain": {
"whitelisted": [],
"blacklisted": [
"tech.micrsofts.tech"
]
},
"ip": {
"whitelisted": [],
"blacklisted": [
"201.77.179.66"
]
},
"sha256": {
"whitelisted": [],
"blacklisted": [
"5b02fc3cfb5d74c09cab724b5b54c53a7c07e5766bffe5b1adf782c9e86a8541"
]
}
},
"credibility": {},
"confidence": {},
"risk": {},
"urgency": {},
"severity": {},
"priority": {},
"threat_actor": [],
"cyber_threat_method": [],
"card_tag": [
{
"tag_name": "LAZARUS",
"tag_id": "c995da56-2cd2-4bd2-8d0b-b28569250f89",
"is_active": true,
"tag_slug": "lazarus"
}
],
"custom_fields": {},
"tracking_id": "4606a2c7-fc87-4b74-b86b-368bdefc7149",
"attachments": [
{
"document_id": "4f8b80e4-d9c4-4ece-93ee-98385fd4182b",
"document_file": "https://tenantname.cyware.com/csapbucket-private/DOCMedia/report.pdf",
"file_name": "report.pdf"
}
],
"analyst_groups": [
{
"id": "cbb60f86-5d86-4690-a2d7-5ad1410467d7",
"name": "Threat Monitoring Group"
}
],
"source_urls": [
{
"source_name": "google",
"source_url": "https://www.google.com"
}
],
"scheduled_expiry_time": 17775936000,
"modified_time": 1778070926,
"matched_irs": "01KQYMGS3J30AB30ZAJG63D9KX"
}