Get incident by a given ID.

External Documentation

To learn more, visit the PhishLabs Open Web Monitoring documentation.

Parameters

ParameterDescription
Incident IDThe ID of the incident.

Example Output

{
	"Infraction": {
		"Infrid": 0,
		"Url": "string",
		"Domain": "string",
		"Catcode": 0,
		"Catname": "string",
		"Status": "string",
		"Comment": "string",
		"Product": "string",
		"Createdate": "2019-08-24T14:15:22Z",
		"Severityname": "string",
		"Statusdescr": "string",
		"Mitigationstart": "2019-08-24T14:15:22Z",
		"Dateresolved": "2019-08-24T14:15:22Z",
		"Actiondescr": "string",
		"Groupcatname": "string",
		"Assignee": "string",
		"Lastcomment": "string",
		"Mxrecord": "string",
		"Ticketstatus": "string",
		"Resolutionstatus": "string",
		"Incidentstatus": "string"
	},
	"EnrichmentData": {
		"Domain": "string",
		"IpAddress": "string",
		"Isp": "string",
		"Country": "string",
		"Asn": 0,
		"RegistrarName": "string",
		"NameServers": [
			"string"
		],
		"MailServers": [
			"string"
		],
		"RegistrationDate": "2019-08-24T14:15:22Z",
		"UpdateDate": "2019-08-24T14:15:22Z",
		"ExpiryDate": "2019-08-24T14:15:22Z",
		"RegistrantFullName": "string"
	}
}

Workflow Library Example

Get Incident with Phishlabs Open Web Monitoring and Send Results Via Email

Preview this Workflow on desktop