Get Incident

Get incident by a given ID.

External Documentation

To learn more, visit the PhishLabs Open Web Monitoring documentation.

Parameters

Parameter	Description
Incident ID	The ID of the incident.

Example Output

{
    "Infraction": {
        "Infrid": 0,
        "Url": "string",
        "Domain": "string",
        "Catcode": 0,
        "Catname": "string",
        "Status": "string",
        "Comment": "string",
        "Product": "string",
        "Createdate": "2019-08-24T14:15:22Z",
        "Severityname": "string",
        "Statusdescr": "string",
        "Mitigationstart": "2019-08-24T14:15:22Z",
        "Dateresolved": "2019-08-24T14:15:22Z",
        "Actiondescr": "string",
        "Groupcatname": "string",
        "Assignee": "string",
        "Lastcomment": "string",
        "Mxrecord": "string",
        "Ticketstatus": "string",
        "Resolutionstatus": "string",
        "Incidentstatus": "string"
    },
    "EnrichmentData": {
        "Domain": "string",
        "IpAddress": "string",
        "Isp": "string",
        "Country": "string",
        "Asn": 0,
        "RegistrarName": "string",
        "NameServers": [
            "string"
        ],
        "MailServers": [
            "string"
        ],
        "RegistrationDate": "2019-08-24T14:15:22Z",
        "UpdateDate": "2019-08-24T14:15:22Z",
        "ExpiryDate": "2019-08-24T14:15:22Z",
        "RegistrantFullName": "string"
    }
}

Workflow Library Example

Get Incident with Phishlabs Open Web Monitoring and Send Results Via Email

Preview this Workflow on desktop