---
title: "Get a file behavior report from a sandbox"
method: GET
path: "/file_behaviours/{sandbox_id}"
tags: ["Files Behaviours"]
---

# Get a file behavior report from a sandbox

`GET /file_behaviours/{sandbox_id}`

## Request

- Base URL: `https://www.virustotal.com/api/v3`
- URL: `https://www.virustotal.com/api/v3/file_behaviours/{sandbox_id}`
- Auth: none required

## Path parameters

- `sandbox_id` string, required

## Headers

- `x-apikey` string, required

## Response `200`

200

- object

## Other responses

- `400`: 400

---

[API](https://skmtc.dev/virustotal/apis/ioc-investigation.md) - [All operations](https://skmtc.dev/virustotal/apis/ioc-investigation/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/ioc-investigation/revisions/4d4fadbb8cbc?raw)