List Debriefs
list_debriefsRetrieve recent daily intelligence debriefs, newest first, with per-day rollups of threats, actors, severity counts, and IOCs. Use the summaries to identify which day to drill into, then fetch full detail for that date.
Instructions
List recent daily intelligence debriefs (newest first) with their per-day rollups: new/updated threats, the day's theme, top categories and actors, severity counts, mitre_technique_count (+ mitre_techniques_sample, the first 10 of an alphabetically-sorted ID list — NOT a top-10), and ioc_breakdown by type with ioc_total. Enough to pick the day worth drilling into without fetching each one; use get_debrief for a date's full detail (all techniques, per-threat lists, highlights). Pass limit (default 30, max 100); the result includes has_more (true when the page is full, so older debriefs may exist). NOTE: the debriefs endpoint does not yet honor offset — it serves the most recent window.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max debriefs to return (default 30, max 100) |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | Yes | ||
| total | No | Total matching rows, when the handler reports one. | |
| has_more | No | True when another page may exist. | |
| next_cursor | No | Opaque cursor for the next page, or null when this is the last page or the endpoint ignores offset. |