Get a ticket

Get a ticket by ticket id.

SecurityJWT

Request

path Parameters

required

string

header Parameters

Workspace

required

string

The workspace identifier, which isolates API requests inside the provided workspace scope.

Example: corodevonmicrosoftcom_TX7T_u

Responses

200

Success

400

Bad request, validation error

401

Unauthorized request

403

Access forbidden

429

Too Many Requests

500

Internal server error

get/v1/tickets/{id}

Request samples

curl
JavaScript
Node.js

Response samples

application/json

{"id": "GYDU-1212",
"ticketTrigger": "malwareInCloudDrive",
"processed": true,
"creationTime": 1662052343274,
"threatTime": 1662052343274,
"processedTime": 1662052343274,
"lastEventTime": 16620523284720,
"parentWorkspaceId": "coroparent_123",
"ticketDetails": {"deviceMetadata": {"userName": "MikeL",
"enrollmentCode": "ENROL-1",
"osType": "Windows",
"upn": "hi@coro.com"
},
"emailMetadata": {"recipients": ["string"
],
"senderEmail": "test@example.com",
"subject": "EMAIL_PHISHING",
"processedMessages": [{"messageId": "1263vsb97"
}
]
},
"filesMetadata": [{"fileName": "Metadata1"
}
],
"location": [{"countryName": "Israel",
"ip": "175.45.176.34 "
}
],
"malwareMetadata": {"fileName": "Malware1",
"path": "folder/Malware1",
"virusName": "Melissa"
},
"affectedUser": "test@example.com",
"service": "Microsoft 365"
},
"workspaceId": "corotest_123"
}