---
title: "Fetch Hash risk list demo events"
method: GET
path: "/hash/demoevents"
tags: ["Hash"]
---

# Fetch Hash risk list demo events

`GET /hash/demoevents`

## Request

- Base URL: `https://api.recordedfuture.com/v2`
- URL: `https://api.recordedfuture.com/v2/hash/demoevents`
- Auth: API key in header `X-RFToken`

Get simulated Symantec EP logs with risky file hashes for testing SIEM/EDR integrations, refreshed every four hours.

## Query parameters

- `limit` integer

## Response `200`

Result of operation

---

[API](https://skmtc.dev/recordedfuture/apis/connect-api.md) - [All operations](https://skmtc.dev/recordedfuture/apis/connect-api/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/connect-api/revisions/ca0276d265f0?raw)