> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Threat Forensics

Returns the forensic information of the given threat.
For more information, visit the [Proofpoint Forensics documentation](https://help.proofpoint.com/Threat_Insight_Dashboard/API_Documentation/Forensics_API#.2Fv2.2Fforensics)

## Parameters

<div className="integrations-table">
  | Parameter                 | Description                                                                                                                                   |
  | ------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
  | Return Campaign Forensics | Select `true` to return aggregate forensics for the entire campaign. Leave empty to return aggregate forensics only for the specified threat. |
  | Threat ID                 | The ID of the threat whose forensic information to retrieve.                                                                                  |
</div>

## Workflow Library Example

[Get Threat Forensics with Proofpoint and Send Results Via Email](https://library.blinkops.com/workflows/get-threat-forensics-with-proofpoint-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/get-threat-forensics-with-proofpoint-and-send-results-via-email/canvas" />
</div>