Get details of a specific incident.
Parameter | Description |
---|---|
Company ID | The ID of the company. Can be found under Account Settings -> General & Security -> Company ID. |
Incident ID | The ID of the incident to get details of. |
{
"company_id": 105153,
"company_name": "<string>",
"incident_id": 22635326,
"classification": "<string>",
"first_reported_by": "<string>",
"first_reported_date": "2023-03-02T21:09:43.831568Z",
"affected_mailbox_count": 4,
"sender_reputation": "<string>",
"banner_displayed": null,
"sender_email": "<string>",
"reply_to": null,
"spf_result": null,
"sender_is_internal": false,
"themis_proba": 1,
"themis_verdict": "<string>",
"mail_server": {
"host": null,
"ip": "<string>"
},
"federation": {
"companies_affected": 193,
"companies_marked_phishing": 12,
"companies_marked_spam": 12,
"companies_marked_fp": 2,
"companies_unclassified": 392,
"phishing_ratio": 2
},
"reports": [
{
"name": "<string>",
"email": "<string>",
"subject": "<string>",
"sender_email": "<string>",
"mail_server": {
"host": null,
"ip": "<string>"
},
"headers": [
{
"name": "<string>",
"value": "<string>"
},
{
"name": "<string>",
"value": "<string>"
}
]
}
],
"links": [
{
"url": "<string>",
"name": "<string>",
"scan_result": "<string>"
},
{
"url": "<string>",
"name": "<string>",
"scan_result": "<string>"
}
],
"attachments": [
{
"file_name": "<string>",
"file_size": 36855,
"md5": "<string>",
"scan_result": "<string>"
},
{
"file_name": "<string>",
"file_size": 2387,
"md5": "<string>",
"scan_result": "<string>"
}
],
"original_email_body": "<string>",
"email_body_text": "<string>",
"reported_by_end_user": true,
"reporter_name": "<string>"
}
Get Incident Details with Ironscales and Send Results Via Email
Preview this Workflow on desktop
Was this page helpful?