List Cases

Get a list of Abnormal cases identified by Abnormal Security.

For Abnormal's documentation, see Abnormal List Cases API (opens in a new tab).

SDK Import:

from admyral.actions import list_abnormal_security_cases

Arguments:

Argument Name	Description	Required
Start Time `start_time`	The start time for the cases to list. Must be in ISO 8601 format (YYYY-MM-DDTHH:MM:SSZ). Default: `1970-01-01T00:00:00Z`	Yes
End Time `end_time`	The end time for the cases to list. Must be in ISO 8601 format (YYYY-MM-DDTHH:MM:SSZ). Default: `2100-01-01T00:00:00Z`	Yes
Limit `limit`	The maximum number of cases to list. Default: `1000`	Yes

Returns

A JSON array of cases.

Required Secrets

Secret Placeholder	Description
`ABNORMAL_SECURITY_SECRET`	Abnormal Security secret. See Abnormal Security setup

SDK Example

cases = list_abnormal_security_cases(
	secrets={
		"ABNORMAL_SECURITY_SECRET": "my_stored_abnormal_secret"
	}
)

Example Output

A list of the top 100 cases identified in Abnormal Cases if no filter query parameter is specified, or a paginated list of cases if a filter query parameter is specified.

[
	{
		"caseId": "1234",
		"severity": "Potential Account Takeover"
	}
]

Connect Abnormal Security Connect AlienVault OTX