threatmonitoring

Count threats

Returns the total count of Threat Monitoring threats for an organization matching the given filter.

Required API key permissions: BreachRisk (select when creating API key in Account Settings)

get/threatmonitoring/threat/count

Request

Query parameters

module'dark_web' | 'open_web' | 'social_media'

Limit findings to this threat monitoring module.

date_period'last_twenty_four_hours' | 'last_seven_days' | 'last_thirty_days' | 'last_three_months' | 'last_six_months' | 'last_twelve_months' | 'all_time'

The period within which results have been detected.

date_period_timezonestring

The timezone for DatePeriod as per the IANA Time Zone database. Default is UTC.

date_field'date_occurred' | 'date_detected' | 'date_alerted' | 'date_updated' | 'date_closed'

The date the DatePeriod filter applies to. If omitted, the ThreatStatus feed's default date is used. Threats with no value for the selected field are omitted from results.

transformsstring[]

A list of matching transforms to filter results by. Repeat the parameter to supply multiple values.

severitiesstring[]

A list of matching severities to filter results by. Repeat the parameter to supply multiple values.

threat_typesstring[]

A list of matching threat types to filter results by. Repeat the parameter to supply multiple values.

source_typesstring[]

A list of matching source types to filter results by. Repeat the parameter to supply multiple values.

auto_dismissedboolean

Limits threats to those auto-dismissed by an AI analyst

closed_statusstring[]

Limits the set of threat results to those with a remediation status matching at least one entry provided. Repeat the parameter to supply multiple values.

threat_status'open' | 'investigating' | 'remediating' | 'closed'

Limits the set of threat results based on their current status

Response

A count of threats

total_resultsinteger

The total number of threats matching the filter

Changes

No recorded changes to this operation across all 1 revision of this API.