List Alert Artifacts - BlinkOps Documentation

Retrieve a list of artifacts associated with the given alert. Note: Requires the ReadOnly role or higher.

External DocumentationTo learn more, visit the Halcyon documentation.

Parameters

Parameter	Description
Alert ID	The ID of the alert to list artifacts for. Can be obtained by using the `List Alerts` action.
Page	The page number of the results to retrieve.
Page Size	Select the number of results to return per page.
Return All Pages	Automatically fetch all resources, page by page.
Sort By	Select the field to sort the results by. Defaults to `Sha256` if available, otherwise `IpAddress` or `Uri`.
Sort Order	Select the order of the sorted results.

Example Output

{
	"items": [
		{
			"kind": "Certificate",
			"thumbprint": "string"
		}
	],
	"pagination": {
		"currentPage": 0,
		"nextPage": 0,
		"previousPage": 0,
		"totalItems": 0,
		"totalPages": 0
	}
}

Workflow Library Example

List Alert Artifacts with Halcyon and Send Results Via Email

Preview this Workflow on desktop

⌘I