RErecordedfuture
Threat Hunting

Get Job Indicators

Fetch threat indicators from a completed hunt job, optionally enriched with risk scores.

post/v1/hunting/jobs/{id}/indicators

Request

  • Base URL
    https://api.recordedfuture.com/autonomous-threat-operations
  • URL
    https://api.recordedfuture.com/autonomous-threat-operations/v1/hunting/jobs/{id}/indicators
  • Auth
    • API key in header X-RFToken
    • or OAuth 2
      Authorization code: https://id.recordedfuture.com/authorize
      Token URL: https://id.recordedfuture.com/token

Path parameters

idstring uuid required

Threat Hunt Job ID

Request body

limitinteger
offsetstring

Response

Indicators for this profile

countinteger required

Number of indicators matching the filter

totalCountinteger required

Total number of indicators matching the filter

nextOffsetstring

Offset to use for getting the next batch of data when paging

Example response

{
  "items": [
    {
      "risk": {
        "rules": [
          {
            "description": "Description of the details on why this rule triggered"
          }
        ]
      }
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.