Details

This atomic belongs to the Darktrace /NETWORK atomic group.

Returns the data used in the "Connections Data" view for a given device in Darktrace. The data returned covers a 4 week period. If using a user-based API token, the user must have the "Visualizer" permission. Data will be anonymized unless the user also has the "Unrestricted Devices" permission.

Target: Darktrace /NETWORK integration target or HTTP Endpoint for "your-tenant.cloud.darktrace.com" with no path

Account Key: None if using an integration-provided target, public and private tokens if using an HTTP Endpoint target

Steps:
[] Build the request payload and authorization headers
[] Request the device information
[] Check if the request was successful:
[]> If it was, set the output variables
[]> If it wasn't, output an error

More information about this API: https://portal.darktrace.com/product-guides/main/api-deviceinfo-request

About
Authorship
Cisco Managed