Get Threat - BlinkOps Documentation

Retrieve threat information for the given threat ID. Note: Requires the ReadOnly role or higher.

External DocumentationTo learn more, visit the Halcyon documentation.

Parameters

Parameter	Description
Threat ID	The ID of the threat to retrieve.

Example Output

{
	"data": {
		"allowed": true,
		"available": true,
		"certificate_list": [
			{
				"certificate_chain": [
					{
						"certificate_id": "string",
						"index": 0,
						"issuer": "string",
						"subject": "string"
					}
				],
				"id": "string",
				"type": "CodeSigning",
				"valid_from": "2019-08-24T14:15:22Z",
				"valid_to": "2019-08-24T14:15:22Z"
			}
		],
		"file_size": "string",
		"file_type": "string",
		"id": "string",
		"md5": "string",
		"name": "string",
		"sha1": "string"
	},
	"errors": [
		"string"
	],
	"pagination": {
		"first_page": 0,
		"last_page": 0,
		"next_page": 0,
		"page": 0,
		"previous_page": 0,
		"total": 0,
		"total_pages": 0
	},
	"success": true
}

Workflow Library Example

Get Threat with Halcyon and Send Results Via Email

Preview this Workflow on desktop

⌘I