> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Threat Timeline

Get a threat's timeline.

## Parameters

<div className="integrations-table">
  | Parameter        | Description                                                                                                                  |
  | ---------------- | ---------------------------------------------------------------------------------------------------------------------------- |
  | Cursor           | Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: "YWdlbnRfaWQ6NTgwMjkzODE=". |
  | Limit            | Limit number of returned items (1-1000). Example: 10.                                                                        |
  | Return All Pages | Automatically fetch all resources, page by page.                                                                             |
  | Sort By          | The column to sort the results by.                                                                                           |
  | Threat ID        | The threat ID.                                                                                                               |
</div>

## Example Output

```json theme={"dark"}
{
	"data": [
		{
			"accountId": "<string>",
			"activityType": 4952,
			"agentId": null,
			"agentUpdatedVersion": null,
			"createdAt": "2025-01-01T15:56:21.535999Z",
			"data": {
				"accountName": "<string>",
				"description": null,
				"externalServiceId": null,
				"fileContentHash": "<string>",
				"fullScopeDetails": "<string>",
				"fullScopeDetailsPath": "<string>",
				"groupName": null,
				"ipAddress": null,
				"osFamily": "<string>",
				"realUser": null,
				"scopeLevel": "<string>",
				"scopeName": "<string>",
				"siteName": "<string>",
				"username": "<string>"
			},
			"groupId": null,
			"hash": "<string>",
			"id": "<string>",
			"osFamily": "<string>",
			"primaryDescription": "<string>",
			"secondaryDescription": "<string>",
			"siteId": "<string>",
			"threatId": null,
			"updatedAt": "2025-01-01T15:56:21.535999Z",
			"userId": null
		},
		{
			"accountId": "<string>",
			"activityType": 22,
			"agentId": "<string>",
			"agentUpdatedVersion": null,
			"createdAt": "2025-01-01T15:56:21.535999Z",
			"data": {
				"accountName": "<string>",
				"computerName": "<string>",
				"confidenceLevel": "<string>",
				"escapedMaliciousProcessArguments": null,
				"externalServiceId": null,
				"fileContentHash": "<string>",
				"fileDisplayName": "<string>",
				"filePath": "<string>",
				"fullScopeDetails": "<string>",
				"fullScopeDetailsPath": "<string>",
				"groupName": "<string>",
				"ipAddress": "<string>",
				"realUser": null,
				"siteName": "<string>",
				"sourceType": "<string>",
				"threatClassification": "<string>",
				"threatClassificationSource": "<string>",
				"username": null
			},
			"groupId": "<string>",
			"hash": null,
			"id": "<string>",
			"osFamily": null,
			"primaryDescription": "<string>",
			"secondaryDescription": "<string>",
			"siteId": "<string>",
			"threatId": "<string>",
			"updatedAt": "2025-01-01T15:56:21.535999Z",
			"userId": null
		}
	],
	"pagination": {
		"nextCursor": null,
		"totalItems": 245
	}
}
```

## Workflow Library Example

[Get Threat Timeline with Sentinelone and Send Results Via Email](https://library.blinkops.com/workflows/get-threat-timeline-with-sentinelone-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/get-threat-timeline-with-sentinelone-and-send-results-via-email/canvas" />
</div>