---
title: "# Threat List"
method: GET
path: "/v1/threat-library/threats"
tags: ["Threats"]
---

# # Threat List

`GET /v1/threat-library/threats`

Threat List; Threat ID, Threat Display ID, Threat Name,  Release Date, Severity, Tags, Affected Operating Systems, Is Predefined, Attack Categories, Attack Module Ids, Unified Kill Chain Phases, Mitres

## Query parameters

- `limit` integer
- `offset` integer
- `severities` string[]
- `attack_category_ids` integer[]
- `attack_module_ids` integer[]
- `release_date_gte` integer
- `release_date_lte` integer
- `is_predefined` boolean
- `affected_products` string[]
- `affected_os` string[]
- `unified_kill_chains` string[]
- `threat_actors` string[]
- `mitre_attack` string[]
- `attacker_objectives` string[]

## Response `200`

ThreatsReturnResponse

- object
  - `pages` Pagination
    - `limit` integer — Limit
    - `offset` integer — Offset
    - `total_count` integer — Total Count
  - `threats` ThreatsReturn[]
    - `affected_os` string[] — Threat Affected Os
    - `attack_categories` AttackCategory[] — Threat Attack Categories
      - `id` integer
      - `name` string
    - `attack_modules` AttackModule[] — Threat Module Ids
      - `id` integer
      - `name` string
    - `created_at` integer — Threat Created At
    - `description` string — Threat Description
    - `display_id` integer — Threat DisplayId
    - `flows` Objective[]
      - `actions` FlowNode[]
        - `display_id` integer
        - `false_items` FlowNode[]
        - `id` integer
        - `name` string
        - `node_id` integer
        - `true_items` FlowNode[]
        - `type` string
      - `id` integer
      - `name` string
      - `type` string
    - `id` integer — Threat Id
    - `is_predefined` boolean — Threat Is Predefined
    - `mitre_attack` MitreDTO[] — Threat Mitre Tactics
      - `tactic` string
      - `techniques` string[]
    - `name` string — Threat Name
    - `release_date` integer — Threat Release Date
    - `severity` string — Threat Severity
    - `tags` string[] — Threat Tags
    - `unified_kill_chains` UkcDTO[] — Threat Kill Chain Phases
      - `phases` string[]
      - `stage` string
    - `updated_at` integer — Threat Updated At

## Other responses

- `default` — genericErrorSwagger is represents the erroneous cases

---

[API](https://skmtc.net/picussecurity/apis/picus-rest-api.md) · [All operations](https://skmtc.net/picussecurity/apis/picus-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/picussecurity/picus-rest-api/versions/cb0d02ee28f8/schema)
