v1
latestOpenAPI 3.1.12026-07-242899061.7 MBThird Party Risk
Third Party Risk alert data
Retrieve detailed information about a Third Party Risk Playbook Alert with data grouped into UI-ready panels.
post/third_party_risk/{playbook_alert_id}
Path parameters
playbook_alert_idstring required
The unique id of a specific Playbook Alert
Request body
Example request
{
"panels": [
"summary",
"details",
"log"
]
}Response
Data for the requested panels.
Example response
{
"status": {
"status_code": "Ok",
"status_message": "Ok"
},
"data": {
"panel_status": {
"status": "Resolved",
"assignee_name": "Marty McFly",
"assignee_id": "uhash:40wXmPVONA",
"created": "2023-07-21T17:32:28Z",
"updated": "2023-07-21T17:32:28Z",
"creator_name": "Marty McFly",
"creator_id": "uhash:40wXmPVONA",
"owner_id": "uhash:3HX3rIn4Kv",
"owner_name": "Recorded Future",
"organisation_id": "uhash:3HX3rIn4Kv",
"organisation_name": "Recorded Future",
"owner_organisation_details": {
"organisations": [
{
"organisation_id": "uhash:3HX3rIn4Kv",
"organisation_name": "Recorded Future"
}
],
"enterprise_id": "uhash:1HX2qIn4Zy",
"enterprise_name": "Recorded Future"
},
"targets": [
{
"id": "ip:8.8.8.8",
"type": "IpAddress",
"name": "8.8.8.8"
}
],
"actions_taken": [
"cyber_vulnerability.patched",
"brand_mentions_on_code_repository.keys_rotated",
"domain_abuse.takedown",
"malicious_sites.takedown",
"third_party_risk.vendor_mitigated_findings",
"identity_novel_exposures.enforced_password_reset"
],
"tags": [
"Tier 2"
]
},
"panel_evidence_summary": {
"assessments": [
{
"risk_rule": "Recent Validated Cyber Attack",
"level": 3,
"added": "2023-08-14T09:48:54.082Z",
"evidence": {
"summary": "226 References in the last 60 days (Aug 14, 2023, 12:49 UTC).",
"data": [
{
"id": "doc:rVdboP",
"title": "Information about CVE-2021-1675",
"published": "2023-07-21T17:32:28Z",
"topic": "Informational",
"fragment": "The vulnerability enables an attacker..."
}
]
},
"metadata": {
"assessment_description": "A TOR node is actively being hosted on *Entity Name* infrastructure",
"action_to_consider": "Contact the vendor and share risk rule context indicating a likely IT policy violation"
}
}
]
},
"panel_log": [
{
"actor_name": "Marty McFly",
"actor_id": "uhash:40wXmPVONA",
"created": "2023-07-21T17:32:28Z",
"modified": "2023-07-21T17:32:28Z",
"message": "Sample log message.",
"changes": {
"assignee_change": {
"old": "uhash:Ds92mDX",
"new": "uhash:AbHGsX"
},
"status_change": {
"old": "New",
"new": "InProgress"
},
"priority_change": {
"old": "Moderate",
"new": "High"
},
"reopen_strategy_change": {
"old": "SignificantUpdates",
"new": "Never"
},
"actions_change": {
"removed": [
"task:4d65b0f8-8254-402c-8178-4a9f97afc9b2"
],
"added": [
"task:4d65b0f8-8254-402c-8178-4a9f97afc9b2"
]
},
"assessment_ids_change": {
"removed": [
"Active Mail Server"
],
"added": [
"C&C Server"
]
}
},
"context": {
"changes": [
{
"attacker": "mail.google.mail.pl",
"manual_addition_user_id": "uhash:40wXmPVONA",
"manual_addition_user_name": "User Name",
"typosquat_targets": [
"google.com"
],
"similar_domains_keywords": [
"*infix*"
]
}
]
}
}
],
"panel_log_v2": [
{
"id": "uuid:a3c4f8f0-8dd8-4940-8b0a-75a59764d068",
"author_id": "uhash:40wXmPVONA",
"author_name": "Marty McFly",
"created": "2023-07-21T17:32:28Z",
"changes": [
{
"old": {
"id": "uhash:Ds92mDX",
"name": "Marty"
},
"new": {
"id": "uhash:Ds92mDX",
"name": "Marty"
}
}
]
}
]
}
}