v1

latestOpenAPI 3.0.02026-07-24311994.6 KB

Investigations

Search by Term

Search for terms found in browsing history search engine results from infected devices.

post/search-by-term

Request body

search_termsstring[]

List of terms to search for in the browsing history. Between 1-10 terms required per request.

cursorstring

Base64 encoded pagination cursor for retrieving the next set of results. Obtained from the 'nextCursor' field in the previous response. Enables efficient pagination through large result sets without data loss.

start_datestring date-time

ISO 8601 formatted timestamp (YYYY-MM-DDThh:mm:ssZ) to filter results from this date/time onward. Applies to the field specified in 'sort_by'. Useful for monitoring new file exposures since a specific date.

end_datestring date-time

ISO 8601 formatted timestamp (YYYY-MM-DDThh:mm:ssZ) to filter results up to this date/time. Applies to the field specified in 'sort_by'. Useful for analyzing historical file exposures within a specific timeframe.

sort_by'date_compromised' | 'date_uploaded'

Field to sort results by. 'date_compromised' sorts by when the file was captured during infection, while 'date_uploaded' sorts by when the file data was integrated into our platform.

sort_direction'asc' | 'desc'

Direction to sort results. 'desc' returns newest file exposures first (recommended for threat monitoring), while 'asc' returns oldest exposures first (useful for forensic analysis and incident timelines).

Example request

{
  "search_terms": [
    "how to hack"
  ],
  "start_date": "2023-01-01T00:00:00Z",
  "end_date": "2023-12-31T23:59:59Z",
  "sort_by": "date_compromised",
  "sort_direction": "desc"
}

Response

Successful term search

nextCursorstring

Cursor for the next page of results