Threatdown (Malwarebytes)Install

Summary

Retrieves the list of suspicious activity records for the Threatdown (Malwarebytes) account, with optional sorting, time filtering, group filtering, and cursor-based pagination.

Inputs

• Sort Field — Field name to sort results by, sent as the sortField query parameter.
• Sort Direction — Sort order (e.g. ascending or descending), sent as the sortDirection query parameter. Accepted values aren't declared in the node.
• Next Cursor — Pagination cursor from a previous response, used to fetch the next page.
• Since — Time value restricting results to activity since that point. Format isn't declared in the node.
• Group IDs — Group ID(s) to limit results to, sent as the groupIds query parameter. Multi-value format isn't specified.
• Per Page — Number of results to return per page.

Output shape

The API response for the account's suspicious activity, normalized into n8n items. Likely a list of activity records plus pagination info.

All parameters are free-text strings and optional. Empty values are probably omitted from the query. Source detail is limited (signature-level), so exact response fields and cursor handling aren't confirmed. To page through results, pass the returned next cursor into Next Cursor.

Examples

Example 1: Pull the latest suspicious activity, 100 records at a time

Per Page=100, Sort Field=timestamp, Sort Direction=desc (sort field name is illustrative; check the API docs).

Example 2: Fetch the next page of results

Set Next Cursor to the cursor value returned by the previous call, keeping the other filters the same.

Example 3: Check recent activity for specific endpoint groups

Set Since to a recent timestamp and Group IDs to the target group ID(s).

Links

• n8n community nodes installation guide