Threat Hunting
Adversary Investigation

CensEye: Get job results

Retrieve the results of a completed CensEye pivot analysis job. Use this endpoint to retrieve the pivots from a finished job, then turn the most distinctive ones into searches or blocklist candidates.<br><br>Each result contains a count and the field-value pairs that were analyzed. Results may be empty if the job is still running.<br><br>Results are paginated. Use the next_page_token from the response to fetch subsequent pages.<br><br>To use this endpoint, your organization must have access to the Adversary Investigation module.

get/v3/threat-hunting/censeye/jobs/{job_id}/results

Request

  • Base URL
    https://api.platform.censys.io
  • URL
    https://api.platform.censys.io/v3/threat-hunting/censeye/jobs/{job_id}/results
  • Auth
    HTTP bearer

Path parameters

job_idstring uuid required

The unique identifier of the CensEye job.

Query parameters

organization_idstring uuid required

The ID of a Censys organization to associate the request with. See the Getting Started docs for more information.

Example:11111111-2222-3333-4444-555555555555
page_sizeinteger

Number of results per page (max 100)

page_tokenstring

Pagination token from previous response

Headers

X-Organization-IDstring uuid

The ID of a Censys organization to associate the request with. See the Getting Started docs for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.

Example:11111111-2222-3333-4444-555555555555

Response

OK

Example response

{
  "result": {
    "results": [
      {
        "field_value_pairs": [
          {
            "field": "host.services.port",
            "value": "80"
          }
        ]
      }
    ]
  }
}

Changes

No recorded changes to this operation across all 2 revisions of this API.