Changes to Full Threat Analysis

Changed in 5 of the 14 revisions of this API.▲33●3○64

1. Sep 22, 202658a5aec0e63b○3
2. Sep 20, 2026eb1bf7b5e785○1
3. Sep 19, 20261bc3c7aeff82○1
4. Aug 31, 20269d9ef31d83e5▲33●2○59
5. Aug 30, 2026aa5294fdc8d8●1

What changed

• Sep 22, 202658a5aec0e63b○3See the full diff
  • ○

    added the optional property firstSeen to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property lastSeen to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property lastUpdated to the response with the 200 status

    response-optional-property-added

• Sep 20, 2026eb1bf7b5e785○1See the full diff
  • ○

    added the optional property lookupStatus to the response with the 200 status

    response-optional-property-added

• Sep 19, 20261bc3c7aeff82○1See the full diff
  • ○

    added the optional property infrastructure to the response with the 200 status

    response-optional-property-added

• Aug 31, 20269d9ef31d83e5▲33●2○59See the full diff
  • ▲

    the response property certificates became nullable for the status 200

    response-property-became-nullable

  • ▲

    the response property geo became nullable for the status 200

    response-property-became-nullable

  • ▲

    the response property message became nullable for the status 401

    response-property-became-nullable

  • ▲

    the response property message became nullable for the status 429

    response-property-became-nullable

  • ▲

    the response property reputation became nullable for the status 200

    response-property-became-nullable

  • ▲

    the response property vulnerabilities became nullable for the status 200

    response-property-became-nullable

  • ▲

    the response property whois became nullable for the status 200

    response-property-became-nullable

  • ▲

    the response property classification became optional for the status 200

    response-property-became-optional

  • ▲

    the response property confidence became optional for the status 200

    response-property-became-optional

  • ▲

    the response property message became optional for the status 401

    response-property-became-optional

  • ▲

    the response property message became optional for the status 429

    response-property-became-optional

  • ▲

    the response property reputation became optional for the status 200

    response-property-became-optional

  • ▲

    added Classification subschema #1 to the classification response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added Confidence subschema #1 to the confidence response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    the certificates response's property type changed from no type to object null for status 200

    response-property-type-changed

  • ▲

    the classification response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the confidence response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the dataTrust response's property type changed from no type to object for status 200

    response-property-type-changed

  • ▲

    the evidence response's property type changed from no type to object for status 200

    response-property-type-changed

  • ▲

    the geo response's property type changed from no type to object null for status 200

    response-property-type-changed

  • ▲

    the vulnerabilities response's property type changed from no type to object null for status 200

    response-property-type-changed

  • ▲

    the whois response's property type changed from no type to object null for status 200

    response-property-type-changed

  • ▲

    removed the required property api_version from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property classification/primary from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property classification/secondary from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property confidence/level from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property confidence/score from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property enrichment_level from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property reputation/harmless from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property reputation/malicious from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property reputation/suspicious from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property reputation/undetected from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property risk_score from the response with the 200 status

    response-required-property-removed

  • ●

    deleted the path request parameter enrichment

    request-parameter-removed

  • ●

    deleted the path request parameter query

    request-parameter-removed

  • ○

    added the new optional query request parameter domain

    new-optional-request-parameter

  • ○

    added the new optional query request parameter enrichment

    new-optional-request-parameter

  • ○

    added the new optional query request parameter hash

    new-optional-request-parameter

  • ○

    added the new optional query request parameter ip

    new-optional-request-parameter

  • ○

    added the new optional query request parameter query

    new-optional-request-parameter

  • ○

    removed the non-success response with the status 400

    response-non-success-status-removed

  • ○

    added the optional property asnReputation to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property azureTenant to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property blocklistHits to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property blocklistListed to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property confidenceScore to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property crossCorrelation to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property dataTrust/dataAgeHours to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property dataTrust/firstSeen to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property dataTrust/lastSeen to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property dataTrust/lastUpdated to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property delisted to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property dns to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property evidence/confidence to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property evidence/dataAgeHours to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property evidence/score to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property hashInfo to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property intelOwl to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property knownGood to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property microsoftTenant to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property mitre to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property otx to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property processingTime to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property ransomware to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property relatedInfrastructure to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property riskScore to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property similar_domains to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property sources to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property techStack to the response with the 200 status

    response-optional-property-added

  • ○

    added the optional property timeline to the response with the 200 status

    response-optional-property-added

  • ○

    the response property dataTrust became required for the status 200

    response-property-became-required

  • ○

    the response property evidence became required for the status 200

    response-property-became-required

  • ○

    removed CertificateData subschema #1 from the certificates response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed DataTrustProfile subschema #1 from the dataTrust response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed GeoData subschema #1 from the geo response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed SocEvidence subschema #1 from the evidence response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed VulnerabilityData subschema #1 from the vulnerabilities response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed WhoisData subschema #1 from the whois response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    added the required property apiVersion to the response with the 200 status

    response-required-property-added

  • ○

    added the required property dataTrust/completeness to the response with the 200 status

    response-required-property-added

  • ○

    added the required property dataTrust/freshness to the response with the 200 status

    response-required-property-added

  • ○

    added the required property dataTrust/observedAt to the response with the 200 status

    response-required-property-added

  • ○

    added the required property dataTrust/providerAgreement to the response with the 200 status

    response-required-property-added

  • ○

    added the required property dataTrust/sourceAgreement to the response with the 200 status

    response-required-property-added

  • ○

    added the required property dataTrust/sources to the response with the 200 status

    response-required-property-added

  • ○

    added the required property enrichmentLevel to the response with the 200 status

    response-required-property-added

  • ○

    added the required property evidence/analystStatus to the response with the 200 status

    response-required-property-added

  • ○

    added the required property evidence/contradictorySignals to the response with the 200 status

    response-required-property-added

  • ○

    added the required property evidence/freshness to the response with the 200 status

    response-required-property-added

  • ○

    added the required property evidence/observedAt to the response with the 200 status

    response-required-property-added

  • ○

    added the required property evidence/reasons to the response with the 200 status

    response-required-property-added

  • ○

    added the required property evidence/recommendedAction to the response with the 200 status

    response-required-property-added

  • ○

    added the required property evidence/sourceSummary to the response with the 200 status

    response-required-property-added

  • ○

    added the required property evidence/verdict to the response with the 200 status

    response-required-property-added

  This revision also has 17 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

• Aug 30, 2026aa5294fdc8d8●1See the full diff
  • ●

    deleted the path request parameter track_reports

    request-parameter-removed