---
title: "Get result of a job"
method: GET
path: "/v1/auto-yara/jobs/{jobId}"
tags: ["Auto Yara"]
---

# Get result of a job

`GET /v1/auto-yara/jobs/{jobId}`

## Request

- Base URL: `https://api.recordedfuture.com/malware-intelligence`
- URL: `https://api.recordedfuture.com/malware-intelligence/v1/auto-yara/jobs/{jobId}`
- Auth: one of:
  - OAuth 2
    - Authorization code: `https://id.recordedfuture.com/authorize`
    - Token URL: `https://id.recordedfuture.com/token`
  - API key in header `X-RFToken`

Retrieve a completed Auto YARA job's generated rule, byte patterns, and sample coverage analysis.

## Path parameters

- `jobId` string, required

## Response `200`

Successful Response

- GetYaraJobResponse: Detailed result of a YARA rule generation job including status, generated rule, hex patterns, and coverage analysis.
  - `job` YaraJob, required: A YARA rule generation job with full detail.
    - `coverage` PatternCoverage: The coverage information for the job, indicating which file hashes are covered by identified patterns. If no coverage data is available, this will be omitted.
      - `covered_hashes` string[], required: SHA-256 hashes of files that are covered by the identified patterns.
      - `uncovered_hashes` string[], required: SHA-256 hashes of files that do not share a common pattern with any other submitted file.
    - `created` string, date-time: The timestamp when the YARA job was created.
    - `job_id` string, required: A unique identifier for the YARA job.
    - `name` string, required: The name of the YARA job.
    - `patterns` Pattern[]: A list of patterns identified during the job's execution.
      - `ascii` string[]: ASCII strings that can be interpreted from the identified hexadecimal pattern.
      - `matching_hashes` string[], required: The SHA-256 hashes of files that contain this identified hexadecimal pattern in their binaries.
      - `pattern` string, required: The identified hexadecimal pattern.
    - `status` string: The current status of the YARA job (e.g., "CREATED", "RUNNING", "FINISHED", "FAILED").
    - `query` string: The query that was used to find the initial hashes.
    - `yara_rule_str` string: The YARA rule string associated with the job.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Page not found

---

[API](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence.md) - [All operations](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence/revisions/190a3d1d0680?raw)