hornet icon

hornet

Interact with hornet API

Actions452

Threat Live Monitoring → Atp Threat Time Of Day Get

AI-generated

Summary

Retrieves ATP threat monitoring data aggregated by time of day for a specified object within a date range.

Inputs

  • date_from (required) — Start of the period in ISO‑8601 UTC format. Must be earlier than date_to.
  • date_to (required) — End of the period in ISO‑8601 UTC format. If a future date is supplied it is clamped to the current date/time.
  • object_id (required) — Numeric ID of the object (user, customer, or partner).
  • region — Optional region filter.
  • is_global — Whether to include global threat data. Defaults to true.
  • APP-ID (required) — Application identifier supplied by the service; sent as an HTTP header.
  • requestOptions.batching.batchSize — Number of items per batch for throttling. -1 disables batching, 0 is treated as 1. Default: 50.
  • requestOptions.batching.batchInterval — Milliseconds to wait between batches. Default: 1000.
  • requestOptions.allowUnauthorizedCerts — Whether to accept responses with invalid SSL certificates. Default: false.
  • requestOptions.proxy — HTTP proxy URL (e.g., http://myproxy:3128). Supports username:password syntax. Default: empty.
  • requestOptions.timeout — Request timeout in milliseconds. Default: 10000.

Output shape

array of objects returned by the Hornet API, each representing threat data grouped by time of day (hourly/daily) for the specified object and date range.

The exact structure depends on the API response; typical fields include timestamps and counts or severity metrics.

Examples

Example 1: Get ATP threat time‑of‑day data for user ID 12345 from 2024‑01‑01T00:00:00Z to 2024‑01‑02T00:00:00Z.

Set date_from='2024-01-01T00:00:00Z', date_to='2024-01-02T00:00:00Z', object_id=12345, APP-ID from credentials, leave region blank, keep is_global=true.

Links

Discussion