Search samples

Search sandbox analyses by hash, malware family, tag, or network indicator.

get/search

Request

  • Base URL
    https://sandbox.recordedfuture.com/api/v0
  • URL
    https://sandbox.recordedfuture.com/api/v0/search
  • Auth
    API key in header Authorization

Query parameters

querystring required

Search query. Examples: family:wannacry, sha256:abc123..., tag:ransomware AND from:2024-01-01, domain:evil.com, ip:1.2.3.4.

limitinteger

Maximum number of items to return. Default is 50, maximum is 200.

offsetstring

Opaque pagination cursor returned by previous responses in the next field.

Response

Paginated search results.

nextstring

Opaque cursor for the next page. Pass as the offset query parameter.

Changes

No recorded changes to this operation across all 1 revision of this API.