Query threat actor data
Submit a JSON object with one of the following fields:
- name: search by name or synonym (e.g., "APT34", "Sofacy")
- uuid: exact UUID search
- country: 2-letter country code (e.g., "FR")
Returns results in MISP Galaxy format as seen in the official README.
post/query
Request body
Response
Returns an array of matching actor clusters for name/country queries, or a single cluster for a UUID query.