taxii

§5.6. The isMalicious identity object (identity--b67e0a86-3f48-5d6d-9b3b-7f4bc1e0a7c4) is served in an envelope. An indicator, or a twin's observed-data, cannot be looked up by id on this server — its id is derived (UUIDv5) and the collections are not indexed by id — so an indicator--… or observed-data--… id is answered 404, with a description that says so; read them from Get Objects or Get Object Manifests. Any other id is a 404.

Plan gate and routing aliases: see GET /taxii.

get/taxii/api-root/collections/{collectionId}/objects/{objectId}

Request

  • Base URL
    https://api.ismalicious.com
  • Auth
    • API key in header X-API-KEY
    • or HTTP bearer
    • or HTTP basic

Path parameters

collectionIdstring required

Collection id

objectIdstring required

STIX id

Response

{"more": false, "objects": [identity]}

object required

Changes