List Sessions - BlinkOps Documentation

Get a list of the sessions in a Security Copilot workspace. The following permissions are required to run this action - SecurityCopilotWorkspaces.ReadWrite.All.

External DocumentationTo learn more, visit the Microsoft Security Copilot documentation.

Parameters

Parameter	Description
Filter	The filtering criteria to filter results using `OData Query Syntax`. For example - `startswith(displayName,'J')`. For more information, refer to Filter.
Return All Pages	Automatically fetch all resources, page by page.
Select	A comma-separated list of properties to return for each object in the response.
Skip	The number of results to skip from the beginning of the result set.
Top	The maximum number of results to return in the response.
Workspace ID	The ID of the Security Copilot workspace. Use `default` for the default workspace.

Example Output

{
	"@odata.context": "https://graph.microsoft.com/beta/$metadata#security/securityCopilot/workspaces('default')/sessions",
	"@odata.count": 2,
	"value": [
		{
			"id": "f0f54c69-8f8a-4f33-b6e3-386d58b408db",
			"createdDateTime": "2025-10-15T15:54:58.4862768Z",
			"lastModifiedDateTime": "2025-10-15T15:54:58.4862768Z",
			"displayName": null
		},
		{
			"id": "8e95c36e-c9bd-4e14-8317-3cd4332e1e3b",
			"createdDateTime": "2025-09-17T19:23:41.1506601Z",
			"lastModifiedDateTime": "2025-09-17T19:28:21.2902705Z",
			"displayName": "who am i"
		}
	]
}

Workflow Library Example

List Sessions with Microsoft Security Copilot and Send Results Via Email

Preview this Workflow on desktop

List Prompts Microsoft Security Copilot Custom Action

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example