MImisp

Query threat actor data

Submit a JSON object with one of the following fields:

  • name: search by name or synonym (e.g., "APT34", "Sofacy")
  • uuid: exact UUID search
  • country: 2-letter country code (e.g., "FR")

Returns results in MISP Galaxy format as seen in the official README.

post/query

Request

  • Base URL
    / (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /query
  • Auth
    none declared

Request body

OR
OR

Response

Returns an array of matching actor clusters for name/country queries, or a single cluster for a UUID query.

OR

Changes

No recorded changes to this operation across all 1 revision of this API.