Get SIEM-oriented summary of flagged message groups

Returns a paginated, reduced-field summary of flagged message groups intended for SIEM ingestion. Array fields are bounded to keep payloads under typical SIEM batch limits.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Query Params
string | null

Opaque pagination cursor returned in the previous response's cursor field.

int32
1 to 1000
Defaults to 100

The maximum number of message groups to return.

date-time | null

Inclusive lower bound on the sort timestamp (newest_created_at for type=flagged, first_reported_as_phish_at for type=reported).

date-time | null

Exclusive upper bound on the sort timestamp (newest_created_at for type=flagged, first_reported_as_phish_at for type=reported).

string
enum
Defaults to flagged

Which timestamp the endpoint sorts/filters on: 'flagged' uses newest_created_at, 'reported' uses first_reported_as_phish_at.

Allowed:
Response

Language
Credentials
Bearer
URL
LoadingLoading…
Response
Choose an example:
application/json