What this endpoint does

This endpoint returns the three link category sections used to classify relationships in the Recorded Future Links graph: "Actors, Tools & TTPs" for threat actor attribution, attack techniques, and malware; "Indicators & Detection Rules" for technically linked infrastructure like IPs, domains, hashes, and URLs; and "Victims & Exploit Targets" for impacted companies and exploited vulnerabilities. These section IDs are used as filter values in the Links: Search endpoint's sections parameter to narrow results to specific relationship types.

Response data

The response contains a small array of section objects, each with an id (used as filter value in Links: Search) and a human-readable name. The current sections are "Actors, Tools & TTPs" (iU_ZsE), "Indicators & Detection Rules" (iU_ZsG), and "Victims & Exploit Targets" (iU_ZsI).