> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Actor FINTEL

Retrieve the `Finished Intelligence` items associated with the threat actor.

**Notes:**

* Enrichment allows access to actor data for `8` hours without consuming tokens.
* The last `5` FINTEL actions of the actor are available without the `Threat Landscape` module.
* Maximum `1` request per second is allowed.

**Response fields:**

* `tokenCharged`: If false, the request does not consume tokens.
* `tokensLeft`: Shows the remaining token balance.

## Parameters

<div className="integrations-table">
  | Parameter       | Description                                                                                                                                                                                                                                                                                                                                                                                                                             |
  | --------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | Document Type   | The document type to filter by.                                                                                                                                                                                                                                                                                                                                                                                                         |
  | Offset          | The offset to start returning results from.                                                                                                                                                                                                                                                                                                                                                                                             |
  | Query           | The query used on actor properties to filter results by, such as `title`, `summary`.                                                                                                                                                                                                                                                                                                                                                    |
  | Report Types    | The report types to filter by.<br /><br />**Applicable types based on the document type:**<br />\* If `Document Types` is `report`: `Actor Profile` or `Emerging Threats`.<br /><br /><br />\* If `Document Types` is `event`: `Ransom Event`, `Network Access`, `Malware`, `Source Update`, `APT Activity`, `Threat Update`, `Database Leak`, or `Vulnerabilities`.<br /><br /><br />\* If `Document Types` is `insight`: leave empty. |
  | Size            | The maximum number of results to return.<br /><br />**Note:** Maximum `1000` results are allowed.                                                                                                                                                                                                                                                                                                                                       |
  | Threat Actor ID | The ID of the threat actor. Can be obtained by the `List Threat Actors` action.                                                                                                                                                                                                                                                                                                                                                         |
</div>

## Example Output

```json theme={"dark"}
{
	"totalUnfilteredCount": "Number",
	"totalFiltered": "Number",
	"results": [
		{
			"id": "String",
			"title": "String",
			"summary": "String",
			"text": "String",
			"tags": [
				"String"
			],
			"references": [
				{
					"id": "String",
					"index": "String",
					"title": "String"
				}
			],
			"externalSources": [
				"String (URL)"
			],
			"associatedThreatActors": [
				{
					"id": "String",
					"name": "String",
					"fields": []
				}
			],
			"tlp": "Number",
			"postedDate": "Unix timestamps",
			"documentType": "String",
			"reportType": "String",
			"data_file": [
				{
					"key": "String",
					"name": "String",
					"type": "String"
				}
			],
			"pdf": "String",
			"media": [
				{
					"type": "String",
					"url": "String",
					"name": "String"
				}
			],
			"iocs": [],
			"mitre": [
				{
					"name": "String",
					"id": "String",
					"fields": [],
					"group": "String"
				}
			],
			"relatedIntelligence": [],
			"geography": "String",
			"sector": "String"
		}
	],
	"filters": {
		"types": [
			{
				"key": "String",
				"doc_count": "Number"
			}
		],
		"documentTypes": [
			{
				"key": "String",
				"doc_count": "Number"
			}
		]
	},
	"tokenCharged": "Boolean",
	"tokensLeft": "Number"
}
```

## Workflow Library Example

[Get Actor Fintel with Kela and Send Results Via Email](https://library.blinkops.com/workflows/get-actor-fintel-with-kela-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/get-actor-fintel-with-kela-and-send-results-via-email/canvas" />
</div>
