Threatdown (Malwarebytes)Install

Summary

Sends a POST request to the Threatdown (Malwarebytes) Suspicious Activity details endpoint, optionally filtered by endpoint, and returns the API response. Supports cursor-based pagination through a Next Cursor query parameter.

Inputs

• Next Cursor — Query parameter used to fetch the next page of results, using a cursor from a previous response.
• Body Fields — Collection of request body fields. Currently offers one option, Endpoint (string), sent as the endpoint field in the request body.
• Additional JSON Body — Extra request body values as a JSON object, merged with the Body Fields values.

Output shape

The Threatdown API response for the suspicious activity details request, normalized into n8n items.

The source pack shows only function signatures, not bodies, so the exact response shape, the merge precedence between Body Fields and Additional JSON Body, and the pagination field names are not confirmed. To page through results, pass the cursor from the previous response into Next Cursor.

Examples

Example 1: Fetch suspicious activity details for one endpoint

Add Body Field Endpoint = the endpoint ID or name; leave Next Cursor empty.

Example 2: Page through further results

Set Next Cursor to the cursor value from the previous response, and keep the same body fields.

Example 3: Send extra filters not exposed in the UI

Put them in Additional JSON Body, e.g. {"endpoint":"abc"}, to be merged with Body Fields.

Links

• n8n community nodes installation guide