Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Incident → Search
AI-generatedSummary
Search for Incident records matching a term, optionally limiting results
Inputs
- searchTerm — Search term to filter incidents
- limit — Maximum number of results to return (1-500)
Output shape
a list of Incident objects
Returns up to the specified limit of Incident records; exact payload shape depends on the underlying API
Examples
Example 1: Search incidents for the term 'phishing' with a limit of 10
searchTerm: "phishing", limit: 10
Example 2: Search all incidents with default limit
searchTerm: "", limit: 50