πŸ”€ collections

The collections relationship returns a list of collections for a given user.

This relationship can be retrieved by using the relationships API endpoint and returns a list containing collection objects.

This relationship accepts both order and filter arguments:

Possible orders (ending on + or -):

  • last_modification_date
  • subscribers_count
  • creation_date

Possible filter modifiers:

  • name

For example, if we want Joe's collections sorted by most recently created first and containing 'emotet' in the collection's name we will do the following request:
https://www.virustotal.com/api/v3/users/Joe/collections?order=creation_date-&filter=name:emotet.

{ "data": [ <COLLECTION_OBJECT> ... ], "links": { "next": <string>, "self": <string> }, "meta": { "count": <int>, "cursor": <string> } }
{ "meta": { "count": 2, "cursor": "CocBChoKDWNyZWF0aW9uX2RhdGUSCQjmsteuveDyAhJlahFzfnZpcnVzdG90YWxjbG91ZHJQCxIKQ29sbGVjdGlvbiJAZGUyZGM5MmU5ZThkYTQ3OWVmY2JkZjczMTBhMWI1ZTY3ODgxYmYxMGRjOTFmNmU1ZjcxNTlhNTJjMjlhODEyZQwYACAB" }, "data": [ { "attributes": { "description": "Test collection", "name": "Prevx infected", "tags": [], "ip_addresses_count": 0, "targeted_industries": [], "domains_count": 0, "creation_date": 1630592216, "references_count": 0, "alt_names": [], "urls_count": 0, "autogenerated_tags": [ "bobsoft", "pecompact", "themida", "rlpack", "yoda", "mew", "aspack", "nspack", "attachment", "pespin", "molebox", "telock", "yodaprot", "ahpack", "armadillo", "execryptor", "upack", "asprotect", "xorcrypt", "fsg", "ntkrnl", "upx" ], "last_modification_date": 1630592216, "top_icon_md5": [ "4e36c557b0188de9290a9ff9685cce17", "5fff7c360c84b7ad1554b722598fb43c", "44abfa8c8002712b3ed19f8f2847dd0d" ], "targeted_countries": [], "files_count": 1234 }, "type": "collection", "id": "de2dc92e9e8da479efcbdf7310a1b5e67881bf10dc91f6e5f7159a52c29a812e", "links": { "self": "https://www.virustotal.com/api/v3/collections/de2dc92e9e8da479efcbdf7310a1b5e67881bf10dc91f6e5f7159a52c29a812e" } } ], "links": { "self": "https://www.virustotal.com/api/v3/users/roadrunner/collections?filter=name%3Ainfected&limit=1&order=creation_date-", "next": "https://www.virustotal.com/api/v3/users/roadrunner/collections?filter=name%3Ainfected&cursor=CocBChoKDWNyZWF0aW9uX2RhdGUSCQjmsteuveDyAhJlahFzfnZpcnVzdG90YWxjbG91ZHJQCxIKQ29sbGVjdGlvbiJAZGUyZGM5MmU5ZThkYTQ3OWVmY2JkZjczMTBhMWI1ZTY3ODgxYmYxMGRjOTFmNmU1ZjcxNTlhNTJjMjlhODEyZQwYACAB&limit=1&order=creation_date-" } }