RErecordedfuture
Analyst Note

Lookup a specific Analyst Note

Retrieve a specific analyst note by its ID with configurable serialization level.

post/lookup/{note_id}

Request

  • Base URL
    https://api.recordedfuture.com/analyst-note
  • URL
    https://api.recordedfuture.com/analyst-note/lookup/{note_id}
  • Auth
    • API key in header X-RFToken
    • or OAuth 2
      Authorization code: https://id.recordedfuture.com/authorize
      Token URL: https://id.recordedfuture.com/token

Path parameters

note_idstring required

Note id

Request body

tagged_textboolean

Determines if the <entity></entity> tags should be inline with entities in the note title and text.

escape_htmlboolean

Determines if HTML tags are escaped, applied only when tagged_text = true.

serialization'id' | 'min' | 'full'

Entity serialization level. When set to id, only the entity id will be included. Setting it to min leads to the id and name being included and setting it to full means that each entity will have the id, name, type and possibly a description included in the response.

Response

Detailed object of the note.

idstring required

Note id

Example response

{
  "attributes": {
    "validated_on": "2025-03-21T12:00:00.000Z",
    "diamond_model": [
      {
        "start": "2024-01-01T13:00:00Z",
        "stop": "2024-01-02T13:00:00Z",
        "adversary": [
          {
            "id": "Lwv8pC",
            "type": "Organization",
            "name": "Sandworm Team"
          }
        ],
        "target": [
          {
            "id": "DmPaB",
            "type": "Industry",
            "name": "Energy and Natural Resources"
          }
        ],
        "malicious_infrastructure": [
          {
            "id": "ip:185.220.101.58",
            "type": "IpAddress",
            "name": "185.220.101.58"
          }
        ]
      }
    ]
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.