---
title: "Get objects from the IoC Stream"
method: GET
path: "/ioc_stream"
tags: ["IoC Stream"]
---

# Get objects from the IoC Stream

`GET /ioc_stream`

## Request

- Base URL: `https://www.virustotal.com/api/v3`
- URL: `https://www.virustotal.com/api/v3/ioc_stream`
- Auth: none required

## Query parameters

- `limit` integer
- `descriptors_only` boolean
- `filter` string
- `cursor` string
- `order` string

## Headers

- `x-apikey` string, required

## Response `200`

200

- object
  - `data` object[]
    - `context_attributes` object
      - `hunting_info` object
        - `rule_name` string
      - `notification_date` integer
      - `notification_id` string
      - `origin` string
      - `sources` object[]
        - `id` string
        - `label` string
        - `type` string
      - `tags` string[]
    - `id` string
    - `type` string
  - `links` object
    - `next` string
    - `self` string
  - `meta` object
    - `cursor` string

## Other responses

- `400`: 400

---

[API](https://skmtc.dev/virustotal/apis/yara-hunting.md) - [All operations](https://skmtc.dev/virustotal/apis/yara-hunting/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/yara-hunting/revisions/8a36850f05b9?raw)