Actions181
- Account Actions
- Accounts Actions
- App Block Actions
- Assets Actions
- Content Filtering Actions
- Create Content Filtering Rule
- Create Update DNS Settings
- Delete Content Filtering Rule
- Enable Disable Content Filtering Rule
- Enable Disable Content Filtering Rule For Policy
- Get A Content Filtering Rule Details
- Get A List Of Content Filtering Rules
- Get DNS Settings
- Get Domain Details
- Get Frequently Used Domain Names
- Get List Of Policies
- Update Content Filtering Rule
- CVE Actions
- Detections Actions
- Device Control Actions
- DNS Actions
- Endpoints Actions
- All Suspicious Activity Of An Endpoint
- Close Suspicious Activity Of An Endpoint
- Delete A Machine
- Delete Multiple Machines
- Endpoint Status
- Export Endpoints
- Get A Scan Of An Endpoint
- Get Endpoint
- Get Endpoint Agent Info
- Get Endpoint Assets
- Get Quarantined Items
- Get Scans Of An Endpoint
- Get The Detections Of A Scan
- Network Information
- Open Suspicious Activity Of An Endpoint
- Remediate Suspicious Activity Of An Endpoint
- Search Endpoints
- Search Grouped Endpoints
- Set Endpoint Tags
- Specific Suspicious Activity Of An Endpoint
- Events Actions
- Exclusions Actions
- Flight Recorder Actions
- Grid Actions
- Export CVEs
- Export Detections
- Export Device Control Events
- Export DNS Activity
- Export Endpoints
- Export Events
- Export OS Patches
- Export RID Rules
- Export Software Assets
- Search CVEs
- Search Detections
- Search Device Control Events
- Search DNS Activity
- Search Endpoints
- Search Events
- Search Events Groupby
- Search Grouped CVEs
- Search Grouped Detections
- Search Grouped Device Control Events
- Search Grouped DNS Activity
- Search Grouped Endpoints
- Search Grouped OS Patches
- Search Grouped RID Rules
- Search Grouped Software Assets
- Search OS Patches
- Search RID Rules
- Search Software Assets
- Groups Actions
- Installation Token Actions
- Installers Actions
- Jobs Actions
- Notifications Actions
- OS Patches Actions
- Policies Actions
- Products Actions
- Quarantine Actions
- Reports Actions
- RID Actions
- SA Actions
- Schedules Actions
- Usage Actions
- Users Actions
- Webhooks Actions
Endpoints → Get Quarantined Items
AI-generatedSummary
Retrieves the quarantined items for a single Threatdown (Malwarebytes) endpoint by its ID, with optional filters and cursor-based pagination.
Inputs
- ID (required) — Path parameter: the endpoint ID whose quarantined items are fetched.
- Next Cursor — Query parameter for pagination; pass the cursor from a previous response to get the next page.
- Name — Query parameter: filter by quarantined item name.
- Category — Query parameter: filter by category.
- Type — Query parameter: filter by type.
- Since — Query parameter: lower bound of the time range. The format is not specified in the node.
- Until — Query parameter: upper bound of the time range. The format is not specified in the node.
Output shape
The API's response for the endpoint's quarantine list, normalized into n8n items. Likely a list of quarantined item records, possibly with a next cursor.
The source pack shows only function signatures, so the exact response shape and pagination fields are unconfirmed. Results are not auto-paginated, so pass Next Cursor yourself to fetch more pages. All filter fields are free-text strings with no declared options.
Examples
Example 1: List everything quarantined on a specific endpoint
Resource: Endpoints; Operation: Get Quarantined Items; ID set to the endpoint ID; leave filters empty.
Example 2: Find recent quarantined items of a certain category
Set ID, Category to the desired category, and Since to a start timestamp.