Get details of a specific incident.

​
Parameters

ParameterDescription
Company IDThe ID of the company. Can be found under Account Settings -> General & Security -> Company ID.
Incident IDThe ID of the incident to get details of.

​
Example Output

{
	"company_id": 11111,
	"company_name": "Blink",
	"incident_id": 11111111,
	"classification": "Report",
	"first_reported_by": "Example",
	"first_reported_date": "2023-03-02T21:09:43.831568Z",
	"affected_mailbox_count": 4,
	"sender_reputation": "low",
	"banner_displayed": null,
	"sender_email": "evaldez.cespedes@lister.com.mx",
	"reply_to": null,
	"spf_result": null,
	"sender_is_internal": false,
	"themis_proba": 0.91,
	"themis_verdict": "Phishing",
	"mail_server": {
		"host": null,
		"ip": "184.60.165.18"
	},
	"federation": {
		"companies_affected": 333,
		"companies_marked_phishing": 81,
		"companies_marked_spam": 5,
		"companies_marked_fp": 1,
		"companies_unclassified": 246,
		"phishing_ratio": 0.24
	},
	"reports": [
		{
			"name": "Example",
			"email": "example@blinkops.com",
			"subject": "IRS Tax Forms K-1",
			"sender_email": "evaldez.cespedes@lister.com.mx",
			"mail_server": {
				"host": null,
				"ip": "184.60.165.18"
			},
			"headers": [
				{
					"name": "Received",
					"value": "from MWHPR19MB0926.namprd19.prod.outlook.com (2603:10b6:300:a0::19)\n by MWHPR19MB0030.namprd19.prod.outlook.com with HTTPS; Thu, 17 Mar 2022\n 20:25:54 +0000"
				},
				{
					"name": "Received",
					"value": "from MW4PR04CA0364.namprd04.prod.outlook.com (2603:10b6:303:81::9)\n by MWHPR19MB0926.namprd19.prod.outlook.com (2603:10b6:300:a0::19) with\n Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5081.17; Thu, 17 Mar\n 2022 20:25:51 +0000"
				}
			]
		}
	],
	"links": [
		{
			"url": "https://www.irs.gov/",
			"name": ""
		},
		{
			"url": "https://u10276865.ct.sendgrid.net/ls/click?upn=ODZIso0HV5wH0JNv4-2B-2FY0ZKe-2B561-2FN0D-2Fjumhk-2Bn0hI-3DyiDL_YgoH4Reaai4qIuxDXSgHMJMYVZgv3b-2BgdrrYBu6c1skxgq0SIma8w13E7IjYa7pc2mnqjNA21-2BOLG607S9B6dvOdECyBKcZs4t-2FktMRS6EbfAIwbdBJyDf20Dj8sO6MSN05hdI04SASXEWU634PYCHetnyvAE59IR96XPXZx11rkk2O-2FWaC-2B2wCZfGtNWsm-2Foih45HyG5vbaHiVIHBYnFE5b8UwCbgOTUw-2BXKnyz-2Fuk-3D",
			"name": "https://www.irs.gov"
		}
	],
	"attachments": [
		{
			"file_name": "logo_irs.jpg",
			"file_size": 25787,
			"md5": "66a5491d99a5f8a79e40f94d581706ba"
		},
		{
			"file_name": "K-1 form.zip",
			"file_size": 17753,
			"md5": "39594e52baa5827dff43cfb084203cf4"
		}
	]
}

​
Workflow Library Example

Get Incident Details with Ironscales and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?