Skip to main content
Get a list of attacks with optional filtering.
External DocumentationTo learn more, visit the Tenable Identity Exposure documentation.

​
Basic Parameters

ParameterDescription
End DateThe end of the timeframe to search attacks until.
LimitThe maximum number of results to return in the response.
Profile IDThe ID of the profile to get attacks for.
Resource TypeThe type of the resource to search for.
Resource ValueThe value of the resource to search for.
Start DateThe start of the timeframe to search attacks from.

​
Advanced Parameters

ParameterDescription
Attack Type IDsA comma-separated list of attack type IDs. Can be obtained using Get Attack Types action.
OrderThe desired order of the returned response.
Return Closed AttacksSelect whether to include closed attacks in the response.
SearchA string to filter the retuned results by.

​
Example Output

[
	{
		"id": 0,
		"directoryId": 0,
		"attackTypeId": 0,
		"dc": "string",
		"date": "2025-10-23T09:10:14.918Z",
		"vector": {
			"template": "string",
			"attributes": [
				{
					"name": "string",
					"value": "string",
					"valueType": "string"
				}
			]
		},
		"source": {
			"ip": "string",
			"hostname": "string"
		},
		"destination": {
			"ip": "string",
			"hostname": "string"
		},
		"isClosed": true
	}
]

​
Workflow Library Example

Get All Attacks with Tenable Identity Exposure and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop