List Detections - BlinkOps Documentation

Retrieve a list of detections with optional filtering.

External DocumentationTo learn more, visit the Upwind documentation.

Basic Parameters

Parameter	Description
Category	The category to filter results by.
Organization ID	The ID of the organization.
Page	The page number to get results from.
Per Page	The maximum number of results to return per page.
Return All Pages	Automatically fetch all resources, page by page.
Severity	The severity of the detection to filter results by.
Type	The type of detection to filter results by.

Advanced Parameters

Parameter	Description
Max First Seen Time	The date and time used to filter results that were first seen on or before this value.
Max Last Seen Time	The date and time used to filter results that were last seen on or before this value.
Min First Seen Time	The date and time used to filter results that were first seen on or after this value.
Min Last Seen Time	The date and time used to filter results that were last seen on or after this value.

Example Output

[
	{
		"id": "string",
		"type": "string",
		"category": "NETWORK",
		"severity": "LOW",
		"status": "PENDING",
		"title": "string",
		"description": "string",
		"resource": {
			"id": "string",
			"external_id": "string",
			"name": "string",
			"type": "string",
			"cloud_provider": "AWS",
			"region": "string",
			"cluster_id": "string",
			"cloud_account_id": "string",
			"cloud_account_name": "string",
			"namespace": "string",
			"internet_exposure": {
				"ingress": {
					"active_communication": true
				}
			},
			"cloud_account_tags": [
				{
					"key": "string",
					"value": "string"
				}
			],
			"risk_categories": [
				"string"
			]
		},
		"triggers": [
			{
				"events": [
					{
						"id": "string",
						"description": "string",
						"event_type": "string",
						"event_time": "2024-07-29T15:51:28.071Z",
						"type": "string",
						"data": {
							"initiator": {
								"type": "string",
								"data": {
									"uid": "string",
									"groups": [
										"string"
									],
									"user_name": "string",
									"user_agent": "string",
									"source_ips": [
										"string"
									]
								}
							}
						}
					}
				],
				"policy_id": "string",
				"policy_name": "string"
			}
		],
		"first_seen_time": "2024-07-29T15:51:28.071Z",
		"last_seen_time": "2024-07-29T15:51:28.071Z",
		"occurrence_count": 0,
		"mitre_attacks": [
			{
				"tactic_id": "string",
				"tactic_name": "string",
				"technique_id": "string",
				"technique_name": "string"
			}
		]
	}
]