Actions181
- Account Actions
- Accounts Actions
- App Block Actions
- Assets Actions
- Content Filtering Actions
- Create Content Filtering Rule
- Create Update DNS Settings
- Delete Content Filtering Rule
- Enable Disable Content Filtering Rule
- Enable Disable Content Filtering Rule For Policy
- Get A Content Filtering Rule Details
- Get A List Of Content Filtering Rules
- Get DNS Settings
- Get Domain Details
- Get Frequently Used Domain Names
- Get List Of Policies
- Update Content Filtering Rule
- CVE Actions
- Detections Actions
- Device Control Actions
- DNS Actions
- Endpoints Actions
- All Suspicious Activity Of An Endpoint
- Close Suspicious Activity Of An Endpoint
- Delete A Machine
- Delete Multiple Machines
- Endpoint Status
- Export Endpoints
- Get A Scan Of An Endpoint
- Get Endpoint
- Get Endpoint Agent Info
- Get Endpoint Assets
- Get Quarantined Items
- Get Scans Of An Endpoint
- Get The Detections Of A Scan
- Network Information
- Open Suspicious Activity Of An Endpoint
- Remediate Suspicious Activity Of An Endpoint
- Search Endpoints
- Search Grouped Endpoints
- Set Endpoint Tags
- Specific Suspicious Activity Of An Endpoint
- Events Actions
- Exclusions Actions
- Flight Recorder Actions
- Grid Actions
- Export CVEs
- Export Detections
- Export Device Control Events
- Export DNS Activity
- Export Endpoints
- Export Events
- Export OS Patches
- Export RID Rules
- Export Software Assets
- Search CVEs
- Search Detections
- Search Device Control Events
- Search DNS Activity
- Search Endpoints
- Search Events
- Search Events Groupby
- Search Grouped CVEs
- Search Grouped Detections
- Search Grouped Device Control Events
- Search Grouped DNS Activity
- Search Grouped Endpoints
- Search Grouped OS Patches
- Search Grouped RID Rules
- Search Grouped Software Assets
- Search OS Patches
- Search RID Rules
- Search Software Assets
- Groups Actions
- Installation Token Actions
- Installers Actions
- Jobs Actions
- Notifications Actions
- OS Patches Actions
- Policies Actions
- Products Actions
- Quarantine Actions
- Reports Actions
- RID Actions
- SA Actions
- Schedules Actions
- Usage Actions
- Users Actions
- Webhooks Actions
Endpoints → Get Scans Of An Endpoint
AI-generatedSummary
Retrieves the scan history of a single Threatdown (Malwarebytes) endpoint by its ID, with optional filters for date, threat detection, and pagination.
Inputs
- ID (required) — Path parameter: the ID of the endpoint whose scans are fetched.
- Since — Query parameter limiting results to scans since the given time. The format isn't declared; it is passed through as a string.
- Threats Detected — Query parameter to filter scans by whether threats were detected. It is a free-text string, and accepted values aren't documented.
- Start Index — Query parameter: pagination offset into the result list.
- Page Size — Query parameter: number of scans to return per page.
- Populate — Query parameter requesting additional related data in the response. Accepted values aren't documented in the node.
Output shape
The scan records for the endpoint as returned by the Threatdown API, normalized into n8n items.
The source shows only function signatures, so exact response fields and item splitting aren't confirmed. Pagination is manual via Start Index and Page Size. Empty optional parameters are presumably omitted from the request.
Examples
Example 1: Check recent scans of a specific endpoint
ID set to the endpoint ID; Since set to a recent timestamp.
Example 2: Page through scans that found threats
ID set; Threats Detected set to true; Page Size 50; Start Index incremented for each call.