πŸ”’ Search IoCs inside a collection

🚧

Deprecated endpoint. This has been replaced by Google Threat Intelligence

We are gearing up to the transition into Google Threat Intelligence! The endpoints are documented at Threat Landscape -> Threat Actors, Malware & Tools, Campaigns, IoC Collections section. Note that when upgrading to Google Threat Intelligence you will enjoy a much larger knowledge base of IoC collections, threat actors, malware, toolkits and campaigns.

🚧

Special privileges required

This endpoint is only available to users with the Threat Landscape module.

Allows to search IoCs inside a collection using VT Intelligence queries.

The expected input is the same as /intelligence/search. By default it searches files, in order to search other entities use entity:domain/ip/url.

Path Params
string
required

Collection's ID

Query Params
string
required

Intelligence query

int32
Defaults to 10

Maximum number of IoCs to retrieve (max 40)

string

Continuation cursor

string

Sorting order

string

Comma-separated attributes to return from the resulting IoCs

string

Comma-separated name of relationships descriptors to return from the IoCs

Headers
string
required

Your API key

Response

Language
Credentials
Click Try It! to start a request and see the response here! Or choose an example:
application/json
text/plain