---
title: "Get all jobs created by user"
method: POST
path: "/v1/auto-sigma/get_jobs"
tags: ["Auto Sigma"]
---

# Get all jobs created by user

`POST /v1/auto-sigma/get_jobs`

## Request

- Base URL: `https://api.recordedfuture.com/malware-intelligence`
- URL: `https://api.recordedfuture.com/malware-intelligence/v1/auto-sigma/get_jobs`
- Auth: one of:
  - OAuth 2
    - Authorization code: `https://id.recordedfuture.com/authorize`
    - Token URL: `https://id.recordedfuture.com/token`
  - API key in header `X-RFToken`

List all Auto Sigma jobs with status and pagination support.

## Request body

- GetSigmaJobsRequest: Request to list Auto Sigma jobs with optional filtering.
  - `limit` number: Max number of jobs to return 10, cannot exceed 1000
  - `offset` number: Number of jobs to skip before returning results

## Response `200`

Successful Response

- GetSigmaJobsResponse: Paginated list of Auto Sigma jobs.
  - `jobs` SigmaJobBase[]: A list of Sigma jobs.
    - `jobId` string, required: A unique identifier for the Sigma job.
    - `name` string, required: The name of the Sigma job.
    - `created` string, date-time, required: The timestamp when the Sigma job was created.
    - `modified` string, date-time, required: The timestamp when the Sigma job was last updated.
    - `status` string, required: The current status of the Sigma job (e.g., "CREATED", "RUNNING", "FINISHED", "FAILED").
    - `query` string, required: The query that was used to find the initial hashes.
    - `startDate` string, date, required: Earliest date to include in the query (cannot be before 2023-11-01)
    - `endDate` string, date, required: Latest date to include in the query, defaults to today in UTC
    - `nMatchedHashes` number, required: Number of hashes matching the query during specified time range
    - `familyCounts` FamilyCounts, required: Statistics over number of matched hashes per malware family

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Page not found

---

[API](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence.md) - [All operations](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence/revisions/190a3d1d0680?raw)