List Investigations

List and query all investigations.

To learn more, visit the Agari Phishing Response documentation.

Basic Parameters​

Parameter	Description
End Date	The end date of the investigation. Defaults to now.
Filter	Search filter that is applied on the results.
Sort	Sort the returning results.
Start Date	The start date of the investigation. Defaults to 24 hours ago.

Advanced Parameters​

Parameter	Description
Assignee	The user ID of the investigation’s assignee.
Classification	The classification of the investigation.
From	The full email from of the phish message of the investigation.
From Domain	The domain of the phish message of the investigation.
Limit	Limit the number of results.
Offset	The offset of the results.
Priority	The priority of the investigation.
Source Type	The source type fo the investigation.
Tags	Filter by the IDs of the tags of the investigation. Multiple tags can be passed in a comma separated list.

Example Output​

{    "assignee": {        "email": "string",        "full_name": "string",        "id": 0    },    "classification": "string",    "created_at": "2024-02-18T07:03:45.469Z",    "from": "string",    "from_domain": "string",    "id": 0,    "indicators": {        "domain": {            "malicious": true,            "malicious_count": 0,            "total_count": 0,            "summary": {                "additionalProp": "string"            }        },        "ip": {            "malicious": true,            "malicious_count": 0,            "total_count": 0,            "summary": {                "additionalProp": "string"            }        },        "uri": {            "malicious": true,            "malicious_count": 0,            "total_count": 0,            "summary": {                "additionalProp": "string"            }        },        "attachment": {            "malicious": true,            "malicious_count": 0,            "total_count": 0,            "summary": {                "additionalProp": "string"            }        },        "agari_msg_risk": {            "malicious": true,            "malicious_count": 0,            "total_count": 0,            "summary": {                "additionalProp": "string"            }        }    },    "investigation_portal_link": "string",    "priority": "string",    "reported_at": "2024-02-18T07:03:45.469Z",    "reported_by": "string",    "source_type": "string",    "state": "string",    "subject": "string",    "tag_ids": [        0    ],    "updated_at": "2024-02-18T07:03:45.469Z",    "user_id": 0}

Workflow Library Example​

List Investigations with Agari Phishing Response and Send Results Via Email

Preview this Workflow on desktop