---
title: "Get sample summary"
method: GET
path: "/samples/{sampleID}/summary"
---

# Get sample summary

`GET /samples/{sampleID}/summary`

## Request

- Base URL: `https://sandbox.recordedfuture.com/api/v0`
- URL: `https://sandbox.recordedfuture.com/api/v0/samples/{sampleID}/summary`
- Auth: API key in header `Authorization`

Retrieve a mid-level analysis summary with per-task threat scores, behavior tags, and signature counts.

## Path parameters

- `sampleID` string, required

## Response `200`

Sample summary.

- object
  - `sample` string: Sample ID
  - `status` 'pending' | 'running' | 'static_analysis' | 'reported' | 'failed': Overall status
  - `custom` string: Custom metadata string (e.g., frontend session ID)
  - `owner` string: Submitting user ID
  - `org_id` string: Organization UUID
  - `meta` object: Submission metadata.
    - `channel` string: Submission channel (e.g., rfshare, api)
    - `rforg` string: Recorded Future organization identifier
  - `target` string: Primary analysis target filename or URL
  - `created` string, date-time: ISO 8601 creation timestamp
  - `completed` string, date-time: ISO 8601 completion timestamp
  - `score` integer: Overall threat score (0-10, where 10 is most malicious)
  - `sha256` string: SHA-256 hash of submitted file
  - `tasks` object: Analysis tasks keyed by composite ID (sampleID-taskName).

## Other responses

- `404`: Sample not found.

---

[API](https://skmtc.dev/recordedfuture/apis/recorded-future-sandbox-api-secopsti.md) - [All operations](https://skmtc.dev/recordedfuture/apis/recorded-future-sandbox-api-secopsti/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/recorded-future-sandbox-api-secopsti/revisions/39ea918b1dca?raw)