DRdruva
Threat Intel

Details of IOC Set

Details of a specific IOC Set.

get/threatintel/v1/ioc-sets/{iocsetid}

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threatintel/v1/ioc-sets/{iocsetid}
  • Auth
    API key in header Authorization

Path parameters

iocsetidinteger required

Specify the IOC Set ID to view the details.

Response

Sourcestring

Source of IOC set.

descriptionstring

IOC set description.

idinteger

Unique ID of the IOC set.

iocSetType'hash' | 'ext'

Details of the IOC type. It can be either file hash or file extension.

isDruvaIOCSetboolean

Indicates that IOC set is published by Druva. This is displayed only for customers with Threat Intel Premium license.

lastModifiedOnstring

Time at which the IOC Set was last modified or updated.

namestring

Name of IOC set.

publishDatestring

Time at which the IOC Set was published.

publishedBystring

Name of admin who published this IOC set.

Example response

{
  "Source": "IOCs of black cat ramsomware",
  "description": "IOC set decription",
  "id": 7,
  "iocSetType": "hash",
  "isDruvaIOCSet": true,
  "lastModifiedOn": "Jan 22, 2025 09:08:42",
  "name": "Black cat IOCs",
  "publishDate": "Jan 07, 2025 07:08:40",
  "publishedBy": "Jane Doe"
}

Changes

No recorded changes to this operation across all 1 revision of this API.