indices

Return vulnerability data stored in index "ipintel-90d"

Overview

This endpoint allows you to retrieve a paginated list of all documents from the ipintel-90d index.
By default, a maximum of 100 documents are shown per page.

Index Description: 90-Day IP Intelligence Index of Initial Access Targets and Command and Control Infrastructure

Paging Over Large Data (cursor)

In order to allow users to iterate over large index datasets, this endpoint provides a server-side "cursor" mechanism. To use the cursor, first call GET /index/ipintel-90d?start_cursor, the response will have a next_cursor id that clients will need to pass as a query parameter to the next request like GET /index/ipintel-90d?cursor=<next_cursor_id>

get/index/ipintel-90d

Request

Query parameters

pageinteger

set the page number of the response

limitinteger

limit the number of findings in the response

cursorstring

continue server-side paging using a cursor id

start_cursor'true'

request server-side paging

order'asc' | 'desc'

direction of the sort

sortstring

field by which to sort the results

cvestring

Specify a CVE ID to search with.

aliasstring

Specify a vulnerability alias to search with.

iavastring

Specify an IAVA ID to search with.

threat_actorstring

Specify a threat actor name to search with.

mitre_idstring

Specify a MITRE ID to search with.

misp_idstring

Specify a MISP ID to search with.

ransomwarestring

Specify a ransomeware family name to search with.

botnetstring

Specify a botnet name to search with.

cidrstring

Specify an IPv4 or IPv6 CIDR

asnstring

Autonomous system number

countrystring

Country name ISO-3166?? format

country_codestring

Country code in ISO-3166?? format

idstring

Record type

kindstring

Kind of IpIntel Finding

hostnamestring

Match a string in the list of hostnames

matchesstring

Search for a string in the field describing the finding

datestring

Specify an exact published date to filter with.

updatedAtStartDatestring

Specify a starting 'updated-at' date to filter with.

updatedAtEndDatestring

Specify an ending 'updated-at' date to filter with.

lastModStartDatestring

Specify a starting last modified date to filter with.

lastModEndDatestring

Specify an ending last modified date to filter with.

pubStartDatestring

Specify a starting published date to filter with.

pubEndDatestring

Specify an ending published date to filter with.

Response

OK

_benchmarknumber

Benchmark is the server-side processing time for the request in seconds. Example: 0.122322 = approximately 122 milliseconds

Changes

No recorded changes to this operation across all 1 revision of this API.