Threat Hunting

Query Profiles

Discover threat hunting profiles configured for your organization with schedules and lookback windows.

post/v1/hunting/profiles/query

Request

  • Base URL
    https://api.recordedfuture.com/autonomous-threat-operations
  • URL
    https://api.recordedfuture.com/autonomous-threat-operations/v1/hunting/profiles/query
  • Auth
    • API key in header X-RFToken
    • or OAuth 2
      Authorization code: https://id.recordedfuture.com/authorize
      Token URL: https://id.recordedfuture.com/token

Request body

idsProfileId[]

Profile IDs to filter by. Must be a non-empty array if provided. Required if enterprise is not specified.

enterprisestring
integrationstring

Example request

{
  "enterprise": "uhash:ABCDEF",
  "integration": "uhash:ABCDEF"
}

Response

List of threat hunt profiles matching the query

Changes

No recorded changes to this operation across all 1 revision of this API.