List active threats
Retrieve a list of active threats observed by Censys by aggregating threat IDs across hosts and web properties. Use this endpoint to see currently active threats so you can prioritize which malicious infrastructure to hunt or block first.<br><br>Threats are active if their fingerprint has been identified on hosts or web properties by Censys scans. This information is also available on the Explore Threats page in the Platform web UI.<br><br>This endpoint is available to organizations that have access to the Adversary Investigation module.
Request
- Base URLhttps://api.platform.censys.io
- URLhttps://api.platform.censys.io/v3/threat-hunting/threats
- AuthHTTP bearer
Query parameters
The ID of a Censys organization to associate the request with. See the Getting Started docs for more information.
Optional CenQL filter to constrain threats list
Headers
The ID of a Censys organization to associate the request with. See the Getting Started docs for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.
Response
OK
Changes
No recorded changes to this operation across all 2 revisions of this API.