Jump to Content
API Documentation
Changelog
API Documentation
Search
API Documentation
Cases: Lookup
All
Pages
Start typing to search…
JUMP TO
Getting Started
Recorded Future APIs Overview
API Entitlements
LLM Instructions
Alert API
Alerts
Alerts: Get by ID
get
Alerts: Get Hits
get
Alerts: Get Image
get
Alerts: Search
get
Alerts: Search Rules
get
Alerts: Update
post
Case API
Case
Cases: Create
post
Cases: Delete
del
Cases: Delete Multiple
del
Cases: Lookup Multiple
post
Cases: Lookup
get
Cases: Search
post
Cases: Update
put
Metadata
Cases: Eligible Assignees
post
Playbook Alerts API
Common
Playbook Alerts: Search
post
Playbook Alerts: Preview
get
Playbook Alerts: Update
put
Domain Abuse
Playbook Alerts: Domain Abuse Detail
post
Playbook Alerts: Domain Abuse Bulk
post
Playbook Alerts: Domain Abuse Image
get
Vulnerability
Playbook Alerts: Vulnerability Detail
post
Playbook Alerts: Vulnerability Bulk
post
Data Leakage on Code Repository
Playbook Alerts: Code Repo Leakage Detail
post
Playbook Alerts: Code Repo Leakage Bulk
post
Third Party Risk
Playbook Alerts: Third Party Risk Detail
post
Playbook Alerts: Third Party Risk Bulk
post
Identity Novel Exposures
Playbook Alerts: Identity Exposures Detail
post
Playbook Alerts: Identity Exposures Bulk
post
Geopolitics Facility
Playbook Alerts: Geopolitics Facility Bulk
post
Playbook Alerts: Geopolitics Facility Detail
post
Playbook Alerts: Geopolitics Facility Image
get
Malware Intelligence
Playbook Alerts: Malware Report Detail
post
Playbook Alerts: Malware Report Bulk
post
Payment Card Fraud
Playbook Alerts: Bank Checks Detail
post
Playbook Alerts: Bank Checks Bulk
post
Playbook Alerts: Bank Checks Image
get
Metadata
Playbook Alerts: Metadata
get
Playbook Alerts: Available Assignees
post
Analyst Note API
Analyst Notes
Analyst Notes: Preview
post
Analyst Notes: Publish
post
Analyst Notes: Search
post
Analyst Notes: Lookup
post
Analyst Notes: Delete
del
Analyst Notes: Get Attachment
get
Analyst Notes: Note Attributes
Analyst Notes: Serialization Options
Analyst Notes: Available Topics
ASI Project API
Project
ASI Projects: List
get
Assets
ASI Assets: Search
post
ASI Assets: Find
get
ASI Assets: Read
get
ASI Assets: List Exposures
get
ASI Assets: Get Filters
get
ASI Assets: Apply Tag
put
ASI Assets: Remove Tag
del
ASI Assets: Bulk Add/Remove Tags
post
ASI Assets: Get Filtered Filters
post
Tagging
ASI Tagging: Get Tags
get
ASI Tagging: Get Task Status
get
ASI Tagging: Bulk Tag Assets
post
ASI Tagging: Add Tag
post
Exposures
ASI Exposures: List
get
ASI Exposures: Get Assets
get
Rules
ASI Rules: Get Static Assets
get
ASI Rules: Add Static Assets
post
Autonomous Threat Operations API
Intelligence Sources
Custom Sources: List
get
Custom Sources: Create
post
Custom Sources: Get
get
Custom Sources: Update
put
Custom Sources: Publish Reports
post
Threat Hunting
Threat Hunting: Get Pending Jobs
get
Threat Hunting: Get Job Indicators
post
Threat Hunting: Get Job Rules
post
Threat Hunting: Update Job Status
post
Threat Hunting: Query Profiles
post
Threat Detection
Threat Detection: Query Profiles
post
Threat Detection: Get Profile Indicators
post
Threat Detection: Get Profile Rules
post
Threat Prevention
Threat Prevention: Query Profiles
post
Threat Prevention: Get Profile Indicators
post
Threat Prevention: Get Profile Rules
post
Connect API
Enrichment: Field Attributes
Company
Company: Lookup by Domain
get
Company: List Risk Rules
get
Company: Search
get
Company: Lookup
get
Company: List References
get
Domain
Domain: Demo Events
get
Domain: Download Risk List
get
Domain: Stat Risk List
head
Domain: List Risk Rules
get
Domain: Search
get
Domain: Lookup
get
Domain: Lookup Extension
get
Hash
Hash: Demo Events
get
Hash: Download Risk List
get
Hash: Stat Risk List
head
Hash: List Risk Rules
get
Hash: Search
get
Hash: Lookup
get
Hash: Lookup Extension
get
IP
IP Address: Demo Events
get
IP Address: Download Risk List
get
IP Address: Stat Risk List
head
IP Address: List Risk Rules
get
IP Address: Search
get
IP Address: Lookup
get
IP Address: Lookup Extension
get
Malware
Malware: Search
get
Malware: Lookup
get
Malware: Lookup Extension
get
URL
URL: Demo Events
get
URL: Download Risk List
get
URL: Stat Risk List
head
URL: List Risk Rules
get
URL: Search
get
URL: Lookup
get
URL: Lookup Extension
get
Vulnerability
Vulnerability: Demo Events
get
Vulnerability: Download Risk List
get
Vulnerability: Stat Risk List
head
Vulnerability: List Risk Rules
get
Vulnerability: Search
get
Vulnerability: Lookup
get
Vulnerability: Lookup Extension
get
Collective Insights API
Overview
Detections
Submit detected IOCs to the Collective Insights
post
Search
Search Collective Insights events
post
Detection Rules API
Detection Rules
Detection Rules: Search
post
Detection Rules: Associated Entity Types
get
Detection Rules: Associated Entities
get
Entity Match API
Entity Match
Entity: Match
post
Entity: Lookup
get
Available Entity Types
Fusion API
Fusion Files
Fusion Files: Get
get
Fusion Files: Stat
head
Fusion Files: Delete
del
Fusion Files: Upload
post
Fusion Files: List Directory
get
Identity API
Identity
Identity: Search
post
Identity: Lookup
post
Identity: Detections
post
Identity: Incident Report
post
Identity: Hostname Lookup
post
Identity: IP Lookup
post
Identity: Password Lookup
post
Identity: Dump Metadata Search
post
Links API
Links
Links: Search
post
Links: Metadata Events
get
Links: Metadata Entities
get
Links: Metadata Sections
get
List API
Lists
Lists: Create
post
Lists: Search
post
Lists: Get Info
get
Lists: Get Status
get
Lists: Get Entities
get
Lists: Get Text Entries
get
Lists: Add Entity
post
Lists: Remove Entity
post
Malware Intelligence API
Malware Intelligence
Malware Intelligence: Query
post
Malware Intelligence: Query Natural Language
post
Malware Intelligence: Query by IOCs
post
Malware Intelligence: Get Sandbox Reports
post
Auto Yara
Auto YARA: Create Job
post
Auto YARA: List Jobs
get
Auto YARA: Edit Job
post
Auto YARA: Get Job
get
Auto YARA: Delete Job
del
Auto YARA: Retry Job
post
Auto Sigma
Auto Sigma: Create Job
post
Auto Sigma: List Jobs
post
Auto Sigma: Get Job
get
Auto Sigma: Delete Job
del
Auto Sigma: Update Job
post
Auto Sigma: Retry Job
post
Risk API
Risk
Risk: Get Active Risk Rule
post
Risk: Search Risk History
post
Sandbox API
Sandbox
Sandbox: Download Sample
get
Sandbox: Get Sample
get
Sandbox: Get Sample Summary
get
Sandbox: Get Sample Overview
get
Sandbox: List Samples
get
Sandbox: Search
get
Sandbox: Select Profile
post
Sandbox: Submit Sample
post
Soar API
SOAR
SOAR: Enrich
post
SOAR: Get Contexts
get
SOAR: Triage Batch
post
Takedown API
Takedown: API
Threat API
Threat Maps
Threat Maps: Available Maps
get
Threat Maps: Threat Actor Map
post
Threat Maps: Threat Actor Map for Organization
post
Threat Maps: Malware Map
post
Threat Maps: Malware Map for Organization
post
Threat Maps: Threat Actor Search
post
Threat Maps: Threat Actor Categories
get
Threat Maps: Malware Categories
get
Powered by
Cases: Lookup
Ask AI
get
https://api.recordedfuture.com/case/lookup/
{id}
Lookup a Case using its ID
Language
Shell
Node
Ruby
PHP
Python
Credentials
Header
Response
Click
Try It!
to start a request and see the response here!