Get details of a specific incident.

Parameters

ParameterDescription
Company IDThe ID of the company. Can be found under Account Settings -> General & Security -> Company ID.
Incident IDThe ID of the incident to get details of.

Example Output

{
	"company_id": 105153,
	"company_name": "<string>",
	"incident_id": 22635326,
	"classification": "<string>",
	"first_reported_by": "<string>",
	"first_reported_date": "2023-03-02T21:09:43.831568Z",
	"affected_mailbox_count": 4,
	"sender_reputation": "<string>",
	"banner_displayed": null,
	"sender_email": "<string>",
	"reply_to": null,
	"spf_result": null,
	"sender_is_internal": false,
	"themis_proba": 1,
	"themis_verdict": "<string>",
	"mail_server": {
		"host": null,
		"ip": "<string>"
	},
	"federation": {
		"companies_affected": 193,
		"companies_marked_phishing": 12,
		"companies_marked_spam": 12,
		"companies_marked_fp": 2,
		"companies_unclassified": 392,
		"phishing_ratio": 2
	},
	"reports": [
		{
			"name": "<string>",
			"email": "<string>",
			"subject": "<string>",
			"sender_email": "<string>",
			"mail_server": {
				"host": null,
				"ip": "<string>"
			},
			"headers": [
				{
					"name": "<string>",
					"value": "<string>"
				},
				{
					"name": "<string>",
					"value": "<string>"
				}
			]
		}
	],
	"links": [
		{
			"url": "<string>",
			"name": "<string>",
			"scan_result": "<string>"
		},
		{
			"url": "<string>",
			"name": "<string>",
			"scan_result": "<string>"
		}
	],
	"attachments": [
		{
			"file_name": "<string>",
			"file_size": 36855,
			"md5": "<string>",
			"scan_result": "<string>"
		},
		{
			"file_name": "<string>",
			"file_size": 2387,
			"md5": "<string>",
			"scan_result": "<string>"
		}
	],
	"original_email_body": "<string>",
	"email_body_text": "<string>",
	"reported_by_end_user": true,
	"reporter_name": "<string>"
}

Workflow Library Example

Get Incident Details with Ironscales and Send Results Via Email

Preview this Workflow on desktop