Actions222
- Application Baseline Actions
- Attack Surface Actions
- Backup Software Actions
- EDR Actions
- Tags Actions
- PII Actions
- External Scan Actions
- Settings Actions
- Compliance Assessment Actions
- Reports Actions
- Compliance Actions
- Jobs Actions
- Active Directory Actions
- Retrieve Ad Roles
- Retrieve Ad User Licenses
- Retrieve Azure Licenses
- Retrieve Azure Ad Logs
- Retrieve Azure Secure Score
- Retrieve Ad Password Policies
- Retrieve Ad Groups View
- Retrieve Ad Ous View
- Retrieve Ad Gpos View
- Retrieve Ad Computers View
- Retrieve Ad Users View
- Retrieve Ad Domain Details
- Retrieve Ad Gpos Details
- Retrieve Get Ous Details
- Retrieve Get Groups Details
- Retrieve Ad Group Users
- Retrieve Ad Group Computers
- Retrieve Get User Details
- Retrieve Get Computer Details
- Retrieve Ad Roles Details
- Retrieve Ad Roles Member
- Retrieve Ad Basic Info
- Audit Log Actions
- Ad Audit Actions
- Asset Data Actions
- Retrieve Bios Info
- Retrieve Bio Info
- Retrieve Browser Extensions
- Retrieve Browser Extension
- Retrieve Ciphers View
- Retrieve Cipher View
- Retrieve Windows Protection Status
- Retrieve Window Protection Status
- Retrieve Asset Compliance Report Card
- Retrieve Asset Firewall Policy
- Retrieve Asset Installed Drivers
- Retrieve Asset Installed Driver
- Retrieve Asset Interface
- Retrieve Asset Msdt
- Retrieve Asset Ports
- Retrieve Asset Port
- Retrieve Asset Security Report Data
- Retrieve Asset Security Report Datum
- Retrieve Asset Shares
- Retrieve Asset Share
- Retrieve Asset Storages
- Retrieve Asset Storage
- Retrieve Asset Unqouted Services
- Retrieve Asset Unqouted Service
- Retrieve Asset User Shares
- Retrieve Asset User Share
- Retrieve Asset Video Info
- Retrieve Asset Windows Reboot Required
- Retrieve Asset Window Reboot Required
- Vulnerabilities Actions
- Firewall Actions
- Integration Actions
- Retrieve Integration Credentials
- Retrieve Integration Credential
- Create Integration Credential
- Update Integration Credential
- Delete Integration Credential
- Retrieve Integration Rules
- Retrieve Integration Rule
- Create Integration Rule
- Update Integration Rule
- Delete Integration Rule
- Retrieve Company Mappings
- Retrieve Company Mapping
- Create Company Mapping
- Update Company Mapping
- Delete Company Mapping
- Event Set Actions
- Ticket Template Actions
- Scheduler Actions
- Credentials Actions
- Asset Actions
- Retrieve Records
- Retrieve Assets
- Retrieve Asset
- Create Asset
- Update Asset
- Delete Asset
- Retrieve Asset Stats
- Retrieve Asset Stat
- Retrieve Asset View
- Retrieve Cron Jobs
- Retrieve Kernel Modules
- Retrieve Suid Permissions
- Retrieve Ufw Firewall Rules
- Retrieve Selinux Settings
- Retrieve Asset Iptables Rules
- Retrieve Asset Users
- Retrieve Asset Processes Running
- Retrieve Asset Services
- Retrieve Asset Patches Info
- Retrieve Asset Firewall Rules
- Retrieve Asset Registry Misconfiguration
- Retrieve Asset Open Ports
- Retrieve Notification Tickets View
- Retrieve System Events View
- Discovery Settings Actions
- Retrieve Discovery Settings
- Retrieve Discovery Setting
- Create Discovery Setting
- Update Discovery Setting
- Delete Discovery Setting
- Retrieve Agent Discoverysettings Mapping
- Retrieve Agent Discoverysetting Mapping
- Create Agent Discoverysetting Mapping
- Update Agent Discoverysetting Mapping
- Delete Agent Discoverysetting Mapping
- Auth Actions
- Company Actions
- Agent Actions
Overview
This node interacts with the "Connect Secure" API to retrieve information about attack surface domains. Specifically, the "Retrieve Attack Surface Domain" operation fetches domain-related data from the attack surface, which can be useful for security analysts or IT teams monitoring their organization's external exposure.
Common scenarios include:
- Gathering a list of domains associated with an organization's attack surface.
- Filtering and sorting domain data based on specific conditions.
- Paginating through large sets of domain records.
Practical example:
A security analyst wants to retrieve all attack surface domains related to a particular user ID, filter them by certain criteria (e.g., domain status), skip the first 10 records, limit the results to 50, and order them by creation date.
Properties
| Name | Meaning |
|---|---|
| X USER ID | User Id - a required string header used to identify the user making the request. |
| Condition | Query Condition - a string to filter the retrieved domains based on specified criteria. |
| Skip | Skip No of Records - number of records to skip in the result set (for pagination). |
| Limit | Limit - maximum number of records to return. |
| Order By | Order By - string specifying the field(s) to sort the results by. |
Output
The node outputs JSON data containing the retrieved attack surface domain records. The structure corresponds to the API response for domain data, typically including domain details such as domain name, status, creation date, and other metadata relevant to the attack surface.
No binary data output is indicated.
Dependencies
- Requires an API key credential for authenticating with the Connect Secure API.
- The node depends on the external Connect Secure API service being accessible.
- No additional environment variables are explicitly required beyond the API authentication.
Troubleshooting
- Missing or invalid X USER ID: Since the user ID header is required, omitting it or providing an incorrect value will likely cause authentication or authorization errors.
- Invalid query parameters: Providing malformed or unsupported values in the condition, skip, limit, or order_by fields may result in API errors or empty responses.
- API connectivity issues: Network problems or incorrect API credentials will prevent successful data retrieval.
- Pagination mistakes: Setting skip or limit incorrectly might lead to unexpected subsets of data or no data returned.
To resolve these:
- Ensure the X USER ID is correctly provided.
- Validate query parameters against the API documentation.
- Verify API credentials and network connectivity.
- Adjust pagination parameters carefully.
Links and References
- Connect Secure API Documentation (replace with actual URL)
- n8n documentation on HTTP Request Node for understanding API interactions.