Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt

Use this file to discover all available pages before exploring further.

Gets a list of impersonation only incidents which are found on Threat protection dashboard (HOME > Incident Summary >Mailbox Anomalies).

​
Parameters

ParameterDescription
Company IDThe ID of the company. Can be found under Account Settings -> General & Security -> Company ID.
PeriodThe period over which to filter the resulting incidents.
Possible values: 0 - Last 24 hours, 1 - Last 7 days, 2 - Last 90 days, 3 - Last 180 days, 4 - Last 360 days, 5 - Current year to date, 6 - All time.

​
Example Output

{
	"page": null,
	"total_pages": null,
	"incidents": [],
	"messages": []
}

​
Workflow Library Example

List Open Impersonation Incidents with Ironscales and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop