1. Packages
  2. Packages
  3. Thoth
  4. API Docs
  5. governance
  6. getIncidentForensics
Viewing docs for Thoth v0.1.15
published on Thursday, Jul 23, 2026 by Aten Security
thoth logo
Viewing docs for Thoth v0.1.15
published on Thursday, Jul 23, 2026 by Aten Security

    Using getIncidentForensics

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getIncidentForensics(args: GetIncidentForensicsArgs, opts?: InvokeOptions): Promise<GetIncidentForensicsResult>
    function getIncidentForensicsOutput(args: GetIncidentForensicsOutputArgs, opts?: InvokeOptions): Output<GetIncidentForensicsResult>
    def get_incident_forensics(incident_id: Optional[str] = None,
                               opts: Optional[InvokeOptions] = None) -> GetIncidentForensicsResult
    def get_incident_forensics_output(incident_id: pulumi.Input[Optional[str]] = None,
                               opts: Optional[InvokeOptions] = None) -> Output[GetIncidentForensicsResult]
    func GetIncidentForensics(ctx *Context, args *GetIncidentForensicsArgs, opts ...InvokeOption) (*GetIncidentForensicsResult, error)
    func GetIncidentForensicsOutput(ctx *Context, args *GetIncidentForensicsOutputArgs, opts ...InvokeOption) GetIncidentForensicsResultOutput

    > Note: This function is named GetIncidentForensics in the Go SDK.

    public static class GetIncidentForensics 
    {
        public static Task<GetIncidentForensicsResult> InvokeAsync(GetIncidentForensicsArgs args, InvokeOptions? opts = null)
        public static Output<GetIncidentForensicsResult> Invoke(GetIncidentForensicsInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetIncidentForensicsResult> getIncidentForensics(GetIncidentForensicsArgs args, InvokeOptions options)
    public static Output<GetIncidentForensicsResult> getIncidentForensics(GetIncidentForensicsArgs args, InvokeOptions options)
    
    fn::invoke:
      function: thoth:governance/getIncidentForensics:getIncidentForensics
      arguments:
        # arguments dictionary
    data "thoth_governance_get_incident_forensics" "name" {
        # arguments
    }

    The following arguments are supported:

    IncidentId string
    IncidentId string
    incidentId String
    incidentId string
    incidentId String

    getIncidentForensics Result

    The following output properties are available:

    AgentId string
    AgentName string
    AttackSurfaceJson string
    EventsJson string
    Id string
    The provider-assigned unique ID for this managed resource.
    IncidentId string
    IncidentSource string
    ResponseJson string
    RiskScore int
    SessionId string
    TelemetrySummaryJson string
    AgentId string
    AgentName string
    AttackSurfaceJson string
    EventsJson string
    Id string
    The provider-assigned unique ID for this managed resource.
    IncidentId string
    IncidentSource string
    ResponseJson string
    RiskScore int
    SessionId string
    TelemetrySummaryJson string
    agent_id string
    agent_name string
    attack_surface_json string
    events_json string
    id string
    The provider-assigned unique ID for this managed resource.
    incident_id string
    incident_source string
    response_json string
    risk_score number
    session_id string
    telemetry_summary_json string
    agentId String
    agentName String
    attackSurfaceJson String
    eventsJson String
    id String
    The provider-assigned unique ID for this managed resource.
    incidentId String
    incidentSource String
    responseJson String
    riskScore Integer
    sessionId String
    telemetrySummaryJson String
    agentId string
    agentName string
    attackSurfaceJson string
    eventsJson string
    id string
    The provider-assigned unique ID for this managed resource.
    incidentId string
    incidentSource string
    responseJson string
    riskScore number
    sessionId string
    telemetrySummaryJson string
    agent_id str
    agent_name str
    attack_surface_json str
    events_json str
    id str
    The provider-assigned unique ID for this managed resource.
    incident_id str
    incident_source str
    response_json str
    risk_score int
    session_id str
    telemetry_summary_json str
    agentId String
    agentName String
    attackSurfaceJson String
    eventsJson String
    id String
    The provider-assigned unique ID for this managed resource.
    incidentId String
    incidentSource String
    responseJson String
    riskScore Number
    sessionId String
    telemetrySummaryJson String

    Package Details

    Repository
    thoth atensecurity/pulumi-thoth
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the thoth Terraform Provider.
    thoth logo
    Viewing docs for Thoth v0.1.15
    published on Thursday, Jul 23, 2026 by Aten Security

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial