List Active Incidents

Gets a list of incidents (active and open) for a specific period. Applies to company types: Company, Partner, Partner-full, Multipartner, Multipartner-full.

Parameters

Parameter	Description
Company ID	The ID of the company. Can be found under Account Settings -> General & Security -> Company ID.
Period	The period over which to filter the resulting incidents. Possible values: 0 - Last 24 hours, 1 - Last 7 days, 2 - Last 90 days, 3 - Last 180 days, 4 - Last 360 days, 5 - Current year to date, 6 - All time.

Example Output

{
    "page": 1,
    "total_pages": 1,
    "incidents": [
        {
            "incidentID": 17691521,
            "incidentState": 1,
            "remediatedTime": "2023-03-02T21:09:43.831568+00:00",
            "affectedMailboxCount": 4,
            "mailboxId": 4875979,
            "mailboxEmail": "example@blinkops.com",
            "senderEmail": "evaldez.cespedes@lister.com.mx",
            "subject": "IRS Tax Forms K-1",
            "threatType": "Unclassified",
            "detectionType": "User Report",
            "reportedBy": "AI-Powered Incident Response"
        }
    ],
    "messages": []
}

Workflow Library Example

List Active Incidents with Ironscales and Send Results Via Email

Preview this Workflow on desktop