v1

latestOpenAPI 3.1.12026-07-242899061.7 MB

Malware Intelligence

Bulk Malware Report alert lookup

Retrieve detailed information about multiple Malware Report notifications with data grouped into UI-ready panels.

post/malware_report

Request body

playbook_alert_idsstring[] required

The unique ids of the triggered Playbook Alerts. Maximum number of ids in a single request is 250.

panelsstring[]

Request inclusion of detailed facility alert data, grouped into a set of panels. If left unset, all panels will be returned.

Example request

{
  "panels": [
    "status",
    "summary",
    "log"
  ]
}

Response

Data for the requested panels.

Example response

{
  "status": {
    "status_code": "Ok",
    "status_message": "Ok"
  },
  "data": [
    {
      "panel_status": {
        "status": "Resolved",
        "assignee_name": "Marty McFly",
        "assignee_id": "uhash:40wXmPVONA",
        "created": "2023-07-21T17:32:28Z",
        "updated": "2023-07-21T17:32:28Z",
        "creator_name": "Marty McFly",
        "creator_id": "uhash:40wXmPVONA",
        "owner_id": "uhash:3HX3rIn4Kv",
        "owner_name": "Recorded Future",
        "organisation_id": "uhash:3HX3rIn4Kv",
        "organisation_name": "Recorded Future",
        "owner_organisation_details": {
          "organisations": [
            {
              "organisation_id": "uhash:3HX3rIn4Kv",
              "organisation_name": "Recorded Future"
            }
          ],
          "enterprise_id": "uhash:1HX2qIn4Zy",
          "enterprise_name": "Recorded Future"
        }
      },
      "panel_evidence_summary": {
        "notification_title": "Alert rule 1 - 10 Reports",
        "number_of_reports": 10,
        "matched_hashes": [
          {
            "sha256": "1012529307d89ecb678d0b5f1495db20a21ccfb4ae0726358cb32817ca0dd540",
            "is_enterprise_submission": true,
            "report_overviews": [
              {
                "report_id": "1012529307d89ecb678d0b5f1495db20a21ccfb4ae0726358cb32817ca0dd540-250331-nzlaqsxptv-behavioral1",
                "sandbox_score": 10,
                "tags": [
                  "arch:x86"
                ]
              }
            ]
          }
        ],
        "detected_malwares": [
          {
            "name": "family:emotet",
            "count": 10
          }
        ],
        "sandbox_scores": [
          {
            "score": 10,
            "count": 10
          }
        ]
      }
    }
  ]
}