--- title: ":: Legacy Route :: This resource returns a list of findings for latest analysis for a given TOE." method: GET path: "/v1/findings/{toe_id}" tags: ["Findings"] --- # :: Legacy Route :: This resource returns a list of findings for latest analysis for a given TOE. `GET /v1/findings/{toe_id}` ## Request - Base URL: `https://api.sandbox.riskrecon.com` - URL: `https://api.sandbox.riskrecon.com/v1/findings/{toe_id}` - Auth: HTTP bearer ::Legacy Route please use findings_paginated:: This use case describes how the Findings API is used to retrieve a list of findings for the latest analysis for a TOE. The toe_id is passed in the API request. In this scenario, all findings for that TOE are returned in the response. To limit or filter the data returned in the response, you can use various parameters in the API request: * Filter by an asset value: You can use the asset_value parameter to search for findings with high, medium, or low asset value. * Filter by severity: You can use the severity parameter to search for findings with high, medium, or low severity. * Filter by asset value and severity: You can use asset_value and severity parameters to search for findings with high, medium, or low asset value and severity. * Filter by multiple asset values: You can use the asset_value parameter multiple times to search for findings with multiple asset values. ## Path parameters - `toe_id` string, required ## Query parameters - `risk_policy` boolean - `security_domain` string - `security_criteria` string - `asset_value[]` string[] - `asset_value_numeric[]` string[] - `priority[]` integer[] - `severity[]` string[] ## Response `200` OK - Finding[]: A collection of Findings. - `country_iso_code` string, nullable: The country ISO code if available. - `first_seen` string, nullable: The date the finding was first discovered. - `tech_country` string, nullable: The tech country associated with host if provided. - `shared_ip` string, nullable: The use of shared ip address hosting. - `registrant_street` string, nullable: The registrant street associated with host if available. - `security_criteria` string: The security_criteria associated with the finding. - `continent_code` string, nullable: The continent code if available. - `registrar_expire_date` string, nullable: The registrar_expire_date if available. - `registrar_abuse_phone` string, nullable: The registrar_abuse_phone if available. - `tech_street` string, nullable: The tech street associated with host if available. - `state_name` string, nullable: The state name associated with host if available or applicable. - `finding_extra_data_value` string, nullable: Any additional data associated with the finding. - `toe_id` string, uuid: The unique identifier for the Target Of Evaluation (TOE). - `finding_data_value` string, nullable: The type of finding data. - `service` string, nullable: The type of service detected. This could be dns, email, web or blank. - `is_web` string: Was a web server found? The value could be 0 or 1. - `admin_org` string, nullable: The admin org if available. - `industry` string, nullable: The industry if available. - `longitude` string, nullable: The latitude associated with host if available. - `registrar` string, nullable: The registrar if available. - `severity` string: The severity for the finding. - `hosting_type` string: The hosting type can be internal or external hosting. - `admin_phone_ext` string, nullable: The admin phone extension if available or applicable. - `admin_country` string, nullable: The name of the admin country if available. - `registrant_email` string, nullable: The registrant_email if available. - `record_load_timestamp` string: The timestamp for when record was loaded. - `admin_name` string, nullable: The admin_name if available. - `asset_value` string: asset value associated with host. high, medium, low or idle - `admin_zip` string, nullable: The admin_zip if available. - `auto_status` string, nullable: The auto status of the finding. - `finding_context` string, nullable: Any additional context related to the finding. - `tech_zip` string, nullable: The tech_zip if available or applicable. - `form_field_types_detected` string, nullable: Any form fields detected. - `admin_city` string, nullable: The admin city name if available. - `finding_id` string: The unique identifier for the finding. - `registrant_country` string, nullable: The name of registrant_country if available. - `analysis_id` string: The analysis_id associated with the finding. - `host_name` string, nullable: The name of the host. - `registrar_iana` string, nullable: The registrar_iana if available. - `finding` string, nullable: High level finding information. - `registrar_abuse_email` string, nullable: The registrar_abuse_email if available. - `expires_on` string, nullable: The expires_on date if applicable. - `registrar_id` string, nullable: The registrar_id if available. - `tech_org` string, nullable: The tech_org if available. - `analyst_status` string, nullable: The analyst status of the finding. - `ip_address` string: The ip address associated with host. - `tech_email` string, nullable: The tech_email if available. - `finding_detail` string, nullable: The details about the finding. - `state_abbrev` string, nullable: The state_abbrev if available or applicable. - `admin_phone` string, nullable: The admin_phone if available. - `domain_name` string, nullable: The domain name if available. - `postal_code` string, nullable: The postal code associated with host if available. - `vendor` string, nullable: vendor if available - `security_domain` string: The security_domain category for the finding. - `registrant_phone` string, nullable: The registrant_phone if available. - `registrant_name` string, nullable: The registrant_phone if available. - `finding_type` string, nullable: The type of finding. - `latitude` string, nullable: The longitude associated with host if available. - `hosting_provider` string, nullable: The hosting provider if available. - `priority` integer: The finding priority based on the asset_value and severity. - `last_seen` string: The date the finding was last seen. - `country_name` string, nullable: The name of country if available. - `false_positive` string, nullable: Was the finding determined to be a false positive? - `registrant_org` string, nullable: The registrant_org if available. - `registrant_phone_ext` string, nullable: The registrant_phone_ext if available or applicable. - `finding_auto_comments` string: The finding_auto_comments if available or applicable. - `scan` string: The scan number. - `tech_phone` string, nullable: The tech_phone if available. - `name_server` string, nullable: The name server if available. - `tech_city` string, nullable: The tech city name if available. - `tech_name` string, nullable: The tech name if available. - `admin_street` string, nullable: The admin street associated with host if available. - `auth_detected` string, nullable: Any authentication detected? - `admin_email` string, nullable: The admin_email if available. - `continent_name` string, nullable: The continent if available. - `finding_subtype` string, nullable: The finding subtype. - `finding_data_description` string, nullable: The finding data description. - `finding_short_description` string, nullable: The finding data description. - `severity_numeric` string: The numeric severity for a finding. - `registry_tech_id` string, nullable: The registry_tech_id if available. - `metro_code` string, nullable: The metro_code if available. - `asset_value_numeric` string: The numeric asset_value associated with a findings host. - `registrant_zip` string, nullable: The registrant_zip if available. - `city_name` string, nullable: The city name if available. - `registrant_city` string, nullable: The registrant_city if available. - `how_to_fix_it` string, nullable: How to fix the finding. - `support_site` string, nullable: The support site if available. - `who_should_fix_it` string, nullable: Who should fix the finding. ## Other responses - `401`: Authentication information was missing or invalid or the user is not authorized to access resource or perform the associated action. - `404`: The URI didn't match an existing resource. --- [API](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api.md) - [All operations](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api/revisions/212ef0eeee9b?raw)