RErecordedfuture
Risk History

Search for risk history

Returns change events (not daily snapshots) for the risk score, criticality, and individual risk rules of one or more entities, so you can see when each value became active and when it was replaced.

post/history

Request

  • Base URL
    https://api.recordedfuture.com/risk
  • URL
    https://api.recordedfuture.com/risk/history
  • Auth
    • API key in header X-RFToken
    • or OAuth 2
      Authorization code: https://id.recordedfuture.com/authorize
      Token URL: https://id.recordedfuture.com/token

Request body

entitiesstring[] required
fromstring date-time

Default value is minus 30 days from to date or current date if to date is missing

tostring date-time

Default value is plus 30 days from from date or current date if from date is missing

Example request

{
  "entities": [
    "string"
  ],
  "from": "2024-11-21T17:32:28.000Z",
  "to": "2024-11-21T17:32:28.000Z"
}

Response

A list of risk histories.

Example response

{
  "data": [
    {
      "attributes": {
        "entity": {
          "id": "B_E7B",
          "provided_id": "B_E7B",
          "type": "Company",
          "name": "Microsoft"
        },
        "scores": [
          {
            "score": 99
          }
        ],
        "levels": [
          {
            "criticality": 1
          }
        ],
        "risk_rules": [
          {
            "risk_id": "attr:51c15fcd-c6b4-4b06-94d6-f19f6c784c9d",
            "risk_name": "Recent Validated Cyber Attack",
            "criticality": 1,
            "evidence": "evidence string",
            "sightings_count": 10
          }
        ]
      }
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.