What this endpoint does

Retrieves the full intelligence picture for a single Dark Web Brand Playbook Alert. These alerts fire when your organization's brand, assets, or watched entities surface on dark web sources such as forums, markets, Telegram channels, and ransomware sites.

What you get back

Data is grouped into UI-ready panels. The status panel carries workflow state, priority, assignee, and the watched targets that matched. The evidence summary holds the matched assets, assessments, screenshot references, and source-specific details for forum, market, Telegram, and ransomware mentions. Additional panels return the analysis report, cached source content, and the alert's full change log. That is enough to triage the mention and decide on escalation without leaving the API.