DRdruva
Threat Intel

Listing of IOC Sets

Provides a list of all the existing IOC Sets created in the IOC library.

get/threatintel/v1/ioc-sets

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threatintel/v1/ioc-sets
  • Auth
    API key in header Authorization

Query parameters

IocType'hash' | 'ext' required

Details of the IOC type. It can be either file hash or file extension.

PageTokenstring

The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.

PageSizeinteger

Maximum number of records to be fetched and displayed.

SortBy'name' | 'totalIOCs' | 'lastModifiedOn'

Specify the parameter by which you intend to sort the listed results. Sorting can be done on the basis of 'IOC Set name', 'totalIOCs', and 'lastModifiedOn' parameters.

SortOrder'asc' | 'desc'

Specify the order you intend to sort and list the results. Sorting can be done in ascending or descending order.

PublishedBystring

Specify the IOC Set publisher detail to list and view IOC Sets created and added by a specific publisher.

Response

Displays the list of all IOC Sets.

allPublishersstring[]

Name of all the administrators who published IOC Set.

nextPageTokenstring

The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=

totalRecordsinteger

Total number of IOC sets.

Example response

{
  "allPublishers": [
    "John Doe"
  ],
  "iocSets": [
    {
      "createdTime": "Jan 07, 2025 07:08:40",
      "description": "IOC set decription",
      "id": 7,
      "iocType": "hash",
      "isDruvaIOC": true,
      "lastModifiedOn": "Jan 22, 2025 09:08:42",
      "name": "Black cat IOCs",
      "nonConvertedIOCs": 12,
      "publishedBy": "Jane Doe",
      "source": "IOCs of black cat ramsomware",
      "totalIOCs": 35
    }
  ],
  "nextPageToken": "eyJpZCI6NTY1NX0=",
  "totalRecords": 27
}

Changes

No recorded changes to this operation across all 1 revision of this API.