v1

latestOpenAPI 3.1.12026-07-242899061.7 MB
Threat Hunting

Get Job Indicators

Fetch threat indicators from a completed hunt job, optionally enriched with risk scores.

post/v1/hunting/jobs/{id}/indicators

Path parameters

idstring uuid required

Threat Hunt Job ID

Threat Hunt Job ID

Request body

limitinteger
offsetstring

Response

Indicators for this profile

countinteger required

Number of indicators matching the filter

totalCountinteger required

Total number of indicators matching the filter

nextOffsetstring

Offset to use for getting the next batch of data when paging

Example response

{
  "items": [
    {
      "description": "File created",
      "ioc": "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\SetupMetrics\\92e14771-c8fd-44ba-9f58-3c56188dcbc4.tmp",
      "procid": 102
    }
  ]
}