Actions86
- RemoteAccess Actions
- Reseller Actions
- List Reseller Invoices
- Get Reseller Invoice
- List Account Usage Line Items
- List Organization Usage Line Items
- List Reseller Subscriptions
- Get Reseller Subscription
- Update Reseller Subscription
- Upgrade Reseller Subscription
- List Accounts
- Create Account
- Get Specific Account
- Update Account
- Get Agent
- Update Agent
- Uninstall Agent
- Isolate Agent
- Release Agent Isolation
- List External Ports
- Get External Port
- List Account Invoices
- Get Account Invoice
- List Incident Reports
- Get Incident Report
- List Memberships
- Create a Membership
- Get Membership
- Update a User's membership
- Delete Membership
- List Organizations
- Create an Organization
- Get Organization
- Update an Organization
- Delete an Organization
- List Remediations
- Get Remediation
- Bulk Approve Remediations
- Bulk Reject Remediations
- List Summary Reports
- List Signals
- Get Signal
- List Remote Access Connections
- Get Actor
- SIEM Actions
- Accounts Actions
- Actor Actions
- Agents Actions
- Invoices Actions
- Escalations Actions
- ExternalRecon Actions
- Identities Actions
- IncidentReports Actions
- Users Actions
- Organizations Actions
- PlatformActions Actions
- SummaryReports Actions
- Signals Actions
- UnwantedAccessRules Actions
- KnownVPNs Actions
Reseller → List Incident Reports
AI-generatedSummary
Lists incident reports for a Huntress account, with optional filters and pagination. Enable Return All to fetch multiple pages; otherwise the operation returns one page.
Inputs
- Account Id (required) — Huntress account ID whose incident reports to retrieve.
- Return All — When enabled, fetches all available pages; when disabled, sends no pagination parameters and returns one page.
- Additional Fields — Optional page size and token, sort field and direction, and filters for indicator type, status, severity, platform, organization ID, agent ID, or PSA ticket external ID.
- Options — Optional custom JSON body, HTTP headers, query filters, batching, debug output, pagination settings, and request timeout.
Output shape
A list of incident report items, with one page or all pages depending on Return All.
The source pack contains signature-only entries for the request implementation, so the exact response envelope and item fields are not shown.