RErecordedfuture
Threat Detection

Get Profile Indicators

Fetch continuously-updated threat indicators from a detection profile with optional risk score enrichment.

post/v1/detection/profiles/{id}/indicators

Request

  • Base URL
    https://api.recordedfuture.com/autonomous-threat-operations
  • URL
    https://api.recordedfuture.com/autonomous-threat-operations/v1/detection/profiles/{id}/indicators
  • Auth
    • API key in header X-RFToken
    • or OAuth 2
      Authorization code: https://id.recordedfuture.com/authorize
      Token URL: https://id.recordedfuture.com/token

Path parameters

idstring uuid required

Identity of an automation profile

Threat Automation Profile ID

Request body

limitinteger
offsetstring

Response

Indicators for this profile

countinteger required

Number of indicators matching the filter

totalCountinteger required

Total number of indicators matching the filter

nextOffsetstring

Offset to use for getting the next batch of data when paging

Example response

{
  "items": [
    {
      "risk": {
        "rules": [
          {
            "description": "Description of the details on why this rule triggered"
          }
        ]
      }
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.