> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create Remediation Incident

Create a remediation incident by Message ID, File hash or a URL contained in an Email.

Required application permissions: `Services | Threat Remediation | Edit`.

<Note>
  External Documentation

  To learn more, visit the [Mimecast documentation](https://developer.services.mimecast.com/docs/threatmanagement/1/routes/api/ttp/remediation/v2/create/post).
</Note>

## Basic Parameters

<div className="integrations-table">
  | Parameter     | Description                                                                            |
  | ------------- | -------------------------------------------------------------------------------------- |
  | File Hash     | The file hash contained in the email that should be remediated.                        |
  | Incident Type | The type of the identifier to remediate by.                                            |
  | Message IDs   | A comma separated or JSON list of message IDs of the emails that should be remediated. |
  | Reason        | The reason of the remediation.                                                         |
  | URL           | An URL present in the email that should be remediated.                                 |
</div>

## Advanced Parameters

<div className="integrations-table">
  | Parameter  | Description                                       |
  | ---------- | ------------------------------------------------- |
  | End Time   | Time of the most recent message to be remediated. |
  | Start Time | Time of the earliest message to be remediated.    |
</div>

## Example Output

```json theme={"dark"}
{
	"fail": [],
	"meta": {
		"status": 200
	},
	"data": [
		{
			"code": "String",
			"create": "String",
			"failed": "String",
			"fileRemediationCanBeCancelled": true,
			"fileRemediationCancelled": "string",
			"fileRemediationExpiryTime": "string",
			"id": "string",
			"identified": 1,
			"modified": "string",
			"reason": "string",
			"remediatedBy": "string",
			"removeFromDevice": "string",
			"restored": 1,
			"searchCriteria": {},
			"successful": 1,
			"type": "string"
		}
	]
}
```

## Workflow Library Example

[Create Remediation Incident with Mimecast and Send Results Via Email](https://library.blinkops.com/workflows/create-remediation-incident-with-mimecast-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/create-remediation-incident-with-mimecast-and-send-results-via-email/canvas" />
</div>