List Alerts - BlinkOps Documentation

Get a paginated list of alerts. Required scope: alerts:read

Basic Parameters

Parameter	Description
End Time	The end time to filter results to.
Importance List	Select the importance levels to filter by.
Page Size	The maximum number of alerts to return per page.
Start Time	The start time to filter results from.
Status List	Select the alert statuses to filter by.
Suppression Status	Select the suppression status to filter by.

Advanced Parameters

Parameter	Description
Cloud Resource ID List	A comma-separated list of cloud resource IDs to filter by.
Company ID	The Mitiga client company ID. Required when acting on behalf of another company.
Entity List	A comma-separated list of entity IDs to filter by.
Entity Type List	A comma-separated list of entity types to filter by.
IOA ID List	A comma-separated list of Indicator of Attack (IOA) IDs to filter by.
Include Beta Events	Select to include beta events in the results.
Is Triage Summary Published	Select to filter by whether the triage summary is published.
Mitre Tactic ID List	A comma-separated list of MITRE tactic IDs to filter by.
Platform List	A comma-separated list of platforms to filter by. For example: `AWS`, `M365`, `AzureAD`, `GCP`, `Okta`, `Github`, and more.
Verdict List	Select the verdicts to filter by.

Workflow Library Example

List Alerts with Mitiga and Send Results Via Email

Preview this Workflow on desktop

Get Threat Incident Forensic Events List Alerts Next Page

⌘I