List Active Incidents - BlinkOps Documentation

Gets a list of incidents (active and open) for a specific period. Applies to company types: Company, Partner, Partner-full, Multipartner, Multipartner-full.

Parameters

Parameter	Description
Company ID	The ID of the company. Can be found under Account Settings -> General & Security -> Company ID.
Period	The period over which to filter the resulting incidents. Possible values: 0 - Last 24 hours, 1 - Last 7 days, 2 - Last 90 days, 3 - Last 180 days, 4 - Last 360 days, 5 - Current year to date, 6 - All time.

Example Output

{
	"page": 1,
	"total_pages": 1,
	"incidents": [
		{
			"incidentID": 17691521,
			"incidentState": 1,
			"remediatedTime": "2023-03-02T21:09:43.831568+00:00",
			"affectedMailboxCount": 4,
			"mailboxId": 4875979,
			"mailboxEmail": "example@blinkops.com",
			"senderEmail": "evaldez.cespedes@lister.com.mx",
			"subject": "IRS Tax Forms K-1",
			"threatType": "Unclassified",
			"detectionType": "User Report",
			"reportedBy": "AI-Powered Incident Response"
		}
	],
	"messages": []
}

Workflow Library Example

List Active Incidents with Ironscales and Send Results Via Email

Preview this Workflow on desktop

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example