Details

This atomic belongs to the Cisco Umbrella atomic group.

Gets security activity report events from Umbrella. This atomic can only return up to the first 500 events within the timeframe provided.

Target: HTTP Endpoint for "reports.api.umbrella.com"

Account Key: HTTP Basic Authentication with an Umbrella Reporting API client ID and secret

Steps:
[] Convert the input times into Unix epochs
[] Execute the API request
[] Check if the API request succeeded:
[]> If it did, attempt to extract the list data and set the output variables
[]> If it didn't, output an error

More information about this API: https://developer.cisco.com/docs/cloud-security/#!reporting-v1-getting-started/security-activity

About
Integration
Authorship
Cisco Managed