v1

latestOpenAPI 3.1.12026-07-242899061.7 MB

Malware Intelligence

Malware Report alert notification data.

Retrieve detailed information about a Malware report notification with data grouped into UI-ready panels.

post/malware_report/{playbook_alert_id}

Path parameters

playbook_alert_idstring required

The unique id of a specific Playbook Alert

Request body

panelsstring[]

Request inclusion of detailed facility alert data, grouped into a set of panels. If left unset, all panels will be returned.

Example request

{
  "panels": [
    "status",
    "summary",
    "log"
  ]
}

Response

Data for the requested panels.

Example response

{
  "status": {
    "status_code": "Ok",
    "status_message": "Ok"
  },
  "data": {
    "panel_status": {
      "status": "Resolved",
      "assignee_name": "Marty McFly",
      "assignee_id": "uhash:40wXmPVONA",
      "created": "2023-07-21T17:32:28Z",
      "updated": "2023-07-21T17:32:28Z",
      "creator_name": "Marty McFly",
      "creator_id": "uhash:40wXmPVONA",
      "owner_id": "uhash:3HX3rIn4Kv",
      "owner_name": "Recorded Future",
      "organisation_id": "uhash:3HX3rIn4Kv",
      "organisation_name": "Recorded Future",
      "owner_organisation_details": {
        "organisations": [
          {
            "organisation_id": "uhash:3HX3rIn4Kv",
            "organisation_name": "Recorded Future"
          }
        ],
        "enterprise_id": "uhash:1HX2qIn4Zy",
        "enterprise_name": "Recorded Future"
      }
    },
    "panel_evidence_summary": {
      "notification_title": "Alert rule 1 - 10 Reports",
      "number_of_reports": 10,
      "matched_hashes": [
        {
          "sha256": "1012529307d89ecb678d0b5f1495db20a21ccfb4ae0726358cb32817ca0dd540",
          "is_enterprise_submission": true,
          "report_overviews": [
            {
              "report_id": "1012529307d89ecb678d0b5f1495db20a21ccfb4ae0726358cb32817ca0dd540-250331-nzlaqsxptv-behavioral1",
              "sandbox_score": 10,
              "tags": [
                "arch:x86"
              ]
            }
          ]
        }
      ],
      "detected_malwares": [
        {
          "name": "family:emotet",
          "count": 10
        }
      ],
      "sandbox_scores": [
        {
          "score": 10,
          "count": 10
        }
      ]
    }
  }
}