Documentation Index
Fetch the complete documentation index at: https://docs.contraforce.com/llms.txt
Use this file to discover all available pages before exploring further.
Time window for the lookup. Allowed values: ThreeHours, SixHours, TwelveHours, TwentyFourHours, FourtyEightHours, Custom. Prefer the smallest window that resolves your specific uncertainty — sign-in volume can be high. Default: TwentyFourHours.
ThreeHours, SixHours, TwelveHours, TwentyFourHours, FourtyEightHours, Custom, null UTC start instant for Custom windows. Required when TimeFilteringType is Custom; ignored otherwise.
UTC end instant for Custom windows. Required when TimeFilteringType is Custom; ignored otherwise.
Pagination cursor returned by a previous call's response. Pass to fetch the next page of results; omit for the first page.
Display name of the user entity being investigated. Surfaced in the audit trail; not used for matching.
Audit-trail anchor — the ID of the resource the lookup is attributed to. Typically the incident ID.
Audit-trail anchor — the display name of the resource the lookup is attributed to. Typically the incident title.