🔒 Search IoCs inside a collection

GET https://www.virustotal.com/api/v3/collections/{id}/search

🚧

Deprecated endpoint. This has been replaced by Google Threat Intelligence

We are gearing up to the transition into Google Threat Intelligence! The endpoints are documented at Threat Landscape -> Threat Actors, Malware & Tools, Campaigns, IoC Collections section. Note that when upgrading to Google Threat Intelligence you will enjoy a much larger knowledge base of IoC collections, threat actors, malware, toolkits and campaigns.

• For searching IoCs inside a collection, refer to /collections/{id}/search endpoint documented here.
• Find the new IoC collection object definition here.
• Find additional information related to the new endpoints here.

🚧

Special privileges required

This endpoint is only available to users with the Threat Landscape module.

Allows to search IoCs inside a collection using VT Intelligence queries.

The expected input is the same as /intelligence/search. By default it searches files, in order to search other entities use entity:domain/ip/url.