Simulation-Result

# Action Details List

Includes detailed action result with attack start & end time, log & alert time and attack module based details (payloads, terminal log, file name, sha256, md5, sha1) for the actions of the given threat. Protocol based results are also available. Includes detection rules mapped to each action under detection_contents, grouped by content source. Only sources the account is licensed for appear, and only rule ids the account may fetch. To retrieve a rule, call GET /v1/mitigation/detection-content/{source}/rules/{rule_id} with the entry's source_name as {source} — that endpoint resolves sources by name, so source_id is not accepted there. Omitted when the account has no detection-content license or no rules map to the action.

get/v1/simulations/{Id}/run/{RunId}/threats/{ThreatId}/actions

Request

Path parameters

Idinteger required

Simulation ID (URI parameter)

RunIdinteger required

Simulation Run ID (URI parameter)

ThreatIdinteger required

Threat ID (URI parameter)

Query parameters

limitinteger
offsetinteger
action_idsinteger[]

List Action Details With Action ID List. (Max 100 ids)

action_display_idsinteger[]

List Action Details With Action Display ID List. (Max 100 display ids)

Response

ActionDetailsListReturnSwagger

Example response

{
  "pages": {
    "limit": 20,
    "total_count": 100
  }
}

Changes

No recorded changes to this operation across all 7 revisions of this API.