Get file movement activity by id

GET

/data-exfiltration/file-movements/{id}

Get file movement

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Responses

🟢200

application/json

Successful operation

Body

🟠401

🟠403

Request Example

Shell

JavaScript

Java

Swift

curl --location --request GET '/data-exfiltration/file-movements/' \
--header 'Authorization: Bearer <token>'

Response Example

{
    "id": "string",
    "person_id": "8CA67511-744C-4D74-B26E-7281CF88712F",
    "person_email": "string",
    "person_name": "string",
    "timestamp": "2023-10-01T12:00:00Z",
    "file_id": "string",
    "file_name": "string",
    "exfiltration_suspected": true,
    "device_id": "string",
    "movement_type": "airdrop",
    "risk_score": 9.2,
    "remote_host": "dropbox.com",
    "remote_ip": "string",
    "risk_factors": [
        {
            "type": "sensitive_file",
            "magnitude": 40
        }
    ],
    "allowlisted": true
}

Modified at 2026-02-10 23:10:01

List file movement activities

List git events