Returns a time-sorted list of connections and events for a device or entity from Darktrace. The request requires either a device (did) or a model breach ID (pbid). If using a user-based API token, the user must have the "Visualizer" or "Platform Accounts Console" permission. Data will be anonymized unless the user also has the "Unrestricted Devices" permission.

Target: Darktrace /NETWORK integration target or HTTP Endpoint for "your-tenant.cloud.darktrace.com" with no path

Account Key: None if using an integration-provided target, public and private tokens if using an HTTP Endpoint target

Steps:
[] Make sure one of the required fields is provided
[] Build the request payload and authorization headers
[] Request connection details
[] Check if the request was successful:
[]> If it was: Set the atomic's output variables
[]> If it wasn't, return an error

More information about this API: https://portal.darktrace.com/product-guides/main/api-details-request

Darktrace /NETWORK - Get Connections and Events