get_asset_activity
Retrieve recent activity for an asset, including logins, processes, and network connections, to investigate incidents.
Instructions
Get recent activity for an asset including logins, processes, and network connections
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| size | No | Number of activity records to return (1-100) | |
| asset_id | Yes | Asset ID or RRN | |
| end_time | No | Filter activity before this ISO 8601 timestamp | |
| start_time | No | Filter activity after this ISO 8601 timestamp | |
| activity_type | No | Type of activity to retrieve | ALL |