Threat Intel

Lists all the IOCs that matches the specified parameters

Lists all the IOCs that matches the specified parameters.

get/threatintel/v1/ioc-sets/iocs

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threatintel/v1/ioc-sets/iocs
  • Auth
    API key in header Authorization

Query parameters

IOCSetIDsinteger[]

Lists all the IOC Sets for the specified IDs to view their IOCs.

PublisherTypestring

List IOC Sets based on the Publisher administrator.

IOCSetNamestring

Lists IOCs based on the IOC Set name.

IOCSetType'hash' | 'ext'

File hashes or file extensions to be fetched and displayed.

SortOrder'asc' | 'desc'

Specify the order you intend to sort and list the results. Sorting can be done in ascending or descending order.

PageSizeinteger

Maximum number of records to be fetched and displayed.

PageTokenstring

The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.

Response

nextPageTokenstring

The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=.

totalIocsinteger

Total number of IOCs present in the specified IOC set.

Example response

{
  "iocs": [
    {
      "addedBy": "John Doe",
      "addedTime": "Jan 22, 2025 09:08:42",
      "convertedIoc": ".wfwhr",
      "id": 25,
      "iocSetID": 7,
      "iocType": "hash",
      "iocValue": ".wfwhr"
    }
  ],
  "nextPageToken": "eyJpZCI6NTY1NX0=",
  "totalIocs": 38
}

Changes

No recorded changes to this operation across all 1 revision of this API.