---
title: "Get sample summary"
method: GET
path: "/samples/{sampleID}/summary"
---

# Get sample summary

`GET /samples/{sampleID}/summary`

Retrieve a mid-level analysis summary with per-task threat scores, behavior tags, and signature counts.

## Path parameters

- `sampleID` string, required

## Response `200`

Sample summary.

- object
  - `sample` string — Sample ID
  - `status` 'pending' | 'running' | 'static_analysis' | 'reported' | 'failed' — Overall status
  - `custom` string — Custom metadata string (e.g., frontend session ID)
  - `owner` string — Submitting user ID
  - `org_id` string — Organization UUID
  - `meta` object — Submission metadata.
    - `channel` string — Submission channel (e.g., rfshare, api)
    - `rforg` string — Recorded Future organization identifier
  - `target` string — Primary analysis target filename or URL
  - `created` string, date-time — ISO 8601 creation timestamp
  - `completed` string, date-time — ISO 8601 completion timestamp
  - `score` integer — Overall threat score (0-10, where 10 is most malicious)
  - `sha256` string — SHA-256 hash of submitted file
  - `tasks` object — Analysis tasks keyed by composite ID (sampleID-taskName).

## Other responses

- `404` — Sample not found.

---

[API](https://skmtc.net/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.net/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/versions/c8c2f68d8b60/schema)