Get All Attacks - BlinkOps Documentation

Get a list of attacks with optional filtering.

External DocumentationTo learn more, visit the Tenable Identity Exposure documentation.

Basic Parameters

Parameter	Description
End Date	The end of the timeframe to search attacks until.
Limit	The maximum number of results to return in the response.
Profile ID	The ID of the profile to get attacks for.
Resource Type	The type of the resource to search for.
Resource Value	The value of the resource to search for.
Start Date	The start of the timeframe to search attacks from.

Advanced Parameters

Parameter	Description
Attack Type IDs	A comma-separated list of attack type IDs. Can be obtained using `Get Attack Types` action.
Order	The desired order of the returned response.
Return Closed Attacks	Select whether to include closed attacks in the response.
Search	A string to filter the retuned results by.

Example Output

[
	{
		"id": 0,
		"directoryId": 0,
		"attackTypeId": 0,
		"dc": "string",
		"date": "2025-10-23T09:10:14.918Z",
		"vector": {
			"template": "string",
			"attributes": [
				{
					"name": "string",
					"value": "string",
					"valueType": "string"
				}
			]
		},
		"source": {
			"ip": "string",
			"hostname": "string"
		},
		"destination": {
			"ip": "string",
			"hostname": "string"
		},
		"isClosed": true
	}
]

Workflow Library Example

Get All Attacks with Tenable Identity Exposure and Send Results Via Email

Preview this Workflow on desktop