Jump to Content
API Documentation
Changelog
API Documentation
API Documentation
Changelog
Serialization options
All
Pages
Start typing to search…
JUMP TO
Recorded Future API
Get Started
Sandbox
Samples
/samples
get
/samples
post
/samples/{sampleID}
get
/search
get
/samples/{sample_id}/profile
post
/samples/{sampleID}/sample
get
/samples/{sampleID}/summary
get
/samples/{sampleID}/overview.json
get
Profiles
Takedown API
Analyst Note API
Analyst Notes
Preview
post
Publish
post
Search
post
Lookup
post
Delete
del
Attachment
get
Note Attributes
Serialization options
Available Topics
ASI Project API
Project
List Projects
get
Assets
Search Assets
post
Find Assets
get
Read Asset
get
List Asset Exposures
get
Get Filters
get
Apply Tag To Asset
put
Remove Tag From Asset
del
Bulk Add Remove Asset Tags
post
Tagging
Get Tags
get
Get Custom Tag Task Status
get
Bulk Add Remove Assets
post
Add Tag
post
Exposures
List Exposures
get
Get Exposure Assets
get
Rules
Get Static Assets
get
Add Static Assets
post
Autonomous Threat Operations API
Intelligence Sources
Get Sources
get
Create Source
post
Get Source
get
Update Source
put
Publish Reports
post
Threat Hunting
Get Pending Jobs
get
Get Job Indicators
post
Get Job Detection Rules
post
Update Job Status
post
Query Profiles
post
Threat Detection
Query Profiles
post
Get Profile Indicators
post
Get Profile Detection Rules
post
Threat Prevention
Query Profiles
post
Get Profile Indicators
post
Get Profile Detection Rules
post
Case API
Case
Build a Case around a Reference Alert, or a Signal Alert
post
Deletes one Case
del
Deletes specified Cases
del
Lookup of Cases using Case IDs
post
Lookup a Case using its ID
get
Searches for any Case matching the criteria
post
Update Assignee, Status, Priority, Title or Description of a Case
put
Metadata
Retrieve all eligible assignees for a Case
post
Connect API
Enrichment Field Attributes
Company
Lookup Company by domain
get
List Company risk rules.
get
Search for Company entities based on a filter
get
Lookup a Company entity by id
get
List references to a Company entity
get
Domain
Fetch Domain risk list demo events
get
Fetch Domain risk list
get
Stat a domain risk list
head
List Domain risk rules
get
Search for Domain entities based on a filter
get
Lookup a Domain entity by id
get
Lookup a Domain entity by id by querying an Intelligence Card extension
get
Hash
Fetch Hash risk list demo events
get
Fetch Hash risk list
get
Stat a domain risk list
head
List Hash risk rules
get
Search for Hash entities based on a filter
get
Lookup a Hash entity by id
get
Lookup a Hash entity by id by querying an Intelligence Card extension
get
IP
Fetch IP Address risk list demo events
get
Fetch IP Address risk list
get
Stat a IP Address risk list
head
List IP Address risk rules
get
Search for IP Address entities based on a filter
get
Lookup a IP Address entity by id
get
Lookup a IP Address entity by id by querying an Intelligence Card extension
get
Malware
Search for Malware entities based on a filter
get
Lookup a Malware entity by id
get
Lookup a Malware entity by id by querying an Intelligence Card extension
get
URL
Fetch URL risk list demo events
get
Fetch URL risk list
get
Stat a URL risk list
head
List URL risk rules
get
Search for URL entities based on a filter
get
Lookup a URL entity by id
get
Lookup a URL entity by id by querying an Intelligence Card extension
get
Vulnerability
Fetch Vulnerability risk list demo events
get
Fetch Vulnerability risk list
get
Stat a Vulnerability risk list
head
List Vulnerability risk rules
get
Search for Vulnerability entities based on a filter
get
Lookup a Vulnerability entity by id
get
Lookup a Vulnerability entity by id by querying an Intelligence Card extension
get
Classic Alert API
Alert (deprecated)
Fetch alert by id
get
Search for alerts
get
Search for alerts with extra details
get
Alert
Search for alert rules.
get
Update one or several alerts
post
Alert V3
Search for alerts
get
Fetch a flat collection of hits
get
Fetch raw image data
get
Fetch alert by id
get
Collective Insights API
Add detected IoCs to the Recorded Future Intelligence Cloud
post
Detection Rules API
Detection Rules
Search
post
Detection Rules Relations
Associated Entity Types
get
Associated Entities
get
Entity Match API
Entity Match
Match
post
Lookup
get
Available Entity Types
Fusion API
File
Fetch a feed file
get
Stat a feed file
head
Delete a feed file
del
Upload a feed file
post
Fetch the content of a directory
get
Identity API
Identity
Search
post
Lookup
post
Detections
post
Incident Report
post
Hostname Lookup
post
IP Lookup
post
Password Lookup
post
Dump Metadata Search
post
Links API
Links
Search
post
Metadata: Events
get
Metadata: Entities
get
Metadata: Sections
get
List API
Lists
Create
post
Search
post
Get Info about a List
get
Get Status for a List
get
Get Entities in a List
get
Get Text Entries in a List
get
Add Entity to a List
post
Remove Entity from a List
post
Malware Intelligence API
Malware Intelligence
Query Malware Intelligence data with query language
post
Query Malware Intelligence data with natural language
post
Query Malware Intelligence data with lists of entities
post
Fetch sandbox reports for a given sha256 hash and query
post
Auto Yara
Create a Auto YARA job
post
Get all jobs created by user
get
Edit a Auto YARA job
post
Get result of a job
get
Delete a Job
del
Retry a Job
post
Auto Sigma
Create a Auto Sigma job
post
Get all jobs created by user
post
Get result of a job
get
Delete a Job
del
Update a Job
post
Retry a Job
post
Playbook Alerts API
Common
Search for Playbook Alerts
post
Preview Playbook Alert
get
Update Playbook Alert
put
Domain Abuse
Detailed Domain Abuse alert data
post
Bulk Domain Abuse alert lookup
post
Screenshot related to Domain Abuse alert
get
Vulnerability
Detailed Vulnerability alert data
post
Bulk Vulnerability alert lookup
post
Data Leakage on Code Repository
Detailed Code Repository Data Leakage alert data
post
Bulk Code Repository Data Leakage alert lookup
post
Third Party Risk
Third Party Risk alert data
post
Bulk Third Party Risk alert lookup
post
Identity Novel Exposures
Detailed Identity Novel Exposures alert data
post
Bulk Identity Novel Exposures alerts lookup
post
Geopolitics Facility
Bulk Geopolitics Facility alerts lookup
post
Geopolitics Facility alert data
post
Image content by image id
get
Malware Intelligence
Malware Report alert notification data.
post
Bulk Malware Report alert lookup
post
Payment Card Fraud
Compromised Bank Checks alert notification data.
post
Bulk Compromised Bank Checks alert lookup
post
Check image by alert id
get
Metadata
Enumerations
get
Available assignees
post
Risk API
Risk History
Search for risk history
post
Active Risks
Get a single active risk rule with enriched evidence
post
Soar API
Soar
Fetch risk information for a set of indicators
post
Lookup all available risk contexts
get
Triage multiple IOC entities
post
Threat API
Threat
Available Threat Maps
get
Threat Actor Threat Map
post
Threat Actor Threat Map for Organization
post
Malware Threat Map
post
Malware Threat Map for Organization
post
Threat Actor Search
post
Threat Actor Categories
get
Malware Categories
get
Powered by
Serialization options
Ask AI
