Get Forensic Events Spotlight - BlinkOps Documentation

Get a list of forensic events scoped to a specific entity, with a specified event pinned and highlighted in the results. Required scope: investigation-workbench:read

Parameters

Parameter	Description
Company ID	The Mitiga client company ID. Required when acting on behalf of another company.
Entity	The forensic entity to filter results by.
Entity Comparison Type	The search operator for the `Entity` filter. Defaults to `EqualsCaseInsensitive`.
Entity Type	The type of entity to filter results by.
Platforms	A comma-separated list of platforms to filter by. For example: `AWS`, `M365`, `AzureAD`, `GCP`, `Okta`, `Github`, and more.
Spotlight Event ID	The ID of the event to pin and highlight in the results.

Workflow Library Example

Get Forensic Events Spotlight with Mitiga and Send Results Via Email

Preview this Workflow on desktop

Get Forensic Event Get Threat Incident

⌘I