---
title: "List the file attachments for the alert"
method: GET
path: "/alerts/{id}/attachments"
tags: ["Alert Analysis"]
---

# List the file attachments for the alert

`GET /alerts/{id}/attachments`

## Request

- Base URL: `https://www.virustotal.com/api/v3/dtm`
- URL: `https://www.virustotal.com/api/v3/dtm/alerts/{id}/attachments`
- Auth: none required

## Path parameters

- `id` string, required

## Headers

- `x-apikey` string, required
- `Content-Type` 'application/json', required

## Response `200`

OK

- FileAttachments: List of file attachments.
  - `attachments` FileAttachment[]: The list of file attachments.
    - `content_type` string: The content type of the file attachment.
    - `created_at` string, date-time: The time the file attachment was created.
    - `created_by_user_id` string: The user ID that created the attachment.
    - `filesize_bytes` integer: The size of the attachment measured in bytes.
    - `id` string: The ID of the file attachment.
    - `name` string: The file name of the attachment.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `500`: Internal Server Error

---

[API](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring.md) - [All operations](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring/revisions/ba27db660651?raw)