Skip to main content
Get a list of forensic events scoped to a specific entity, with a specified event pinned and highlighted in the results. Required scope: investigation-workbench:read

Parameters

ParameterDescription
Company IDThe Mitiga client company ID. Required when acting on behalf of another company.
EntityThe forensic entity to filter results by.
Entity Comparison TypeThe search operator for the Entity filter. Defaults to EqualsCaseInsensitive.
Entity TypeThe type of entity to filter results by.
PlatformsA comma-separated list of platforms to filter by.

For example: AWS, M365, AzureAD, GCP, Okta, Github, and more.
Spotlight Event IDThe ID of the event to pin and highlight in the results.

Workflow Library Example

Get Forensic Events Spotlight with Mitiga and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop