INCIDENTS
Get Incident Activity
Return the derived incident timeline
GET
Get incident activity
Returns a merged timeline of:
- threat-link activity
- threat-version activity for linked threats
Query Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
include_versions_before_link | boolean | No | Include historical threat versions created before the threat was linked into the incident |
Get incident activity