Search Changed Files - BlinkOps Documentation

Search for recently changed files.

External DocumentationTo learn more, visit the Lacework documentation.

Parameters

Parameter	Description
End Time	Query for changed files until given timestamp.
Start Time	Query for changed files since given timestamp.

Example Output

{
	"paging": {
		"rows": 5000,
		"totalRows": 654455,
		"urls": {
			"nextPage": "https://YourLacework.lacework.net/api/v2/Activities/ChangedFiles/AbcdEfgh123..."
		}
	},
	"data": [
		{
			"startTime": "2021-09-10T23:00:00Z",
			"endTime": "2021-09-11T00:00:00Z",
			"mid": 12345,
			"filePath": "/usr/bin/curl",
			"filedataHash": "d055afd3h16f11460b3549885a9u8a40f1905df1f9d83cf16gbfa8a3157c29ac",
			"mtime": "1631306708492",
			"size": 210944,
			"threatInfo": "null"
		},
		{
			"startTime": "2021-09-10T23:00:00Z",
			"endTime": "2021-09-11T00:00:00Z",
			"mid": 12345,
			"filePath": "/bin/sleep",
			"filedataHash": "ada88f7fd24bcdfdde10294c76968a335c2414ea7d43c5e3829b65cb037e90a4",
			"mtime": "1631317667570",
			"size": 0,
			"threatInfo": "null"
		}
	]
}

Workflow Library Example

Search Changed Files with Lacework and Send Results Via Email

Preview this Workflow on desktop