Rank malware families by prevalence and opportunity scores for your primary organization.
What this endpoint does
Returns the malware threat map for the API token's primary organization — a ranked view of malware families by their global prevalence and opportunity to target your organization. Filter by malware entity IDs, category IDs (from Malware Categories), or watchlist IDs. An empty request body returns the full map. For multi-organization enterprises, use Malware Threat Map (Org) with an org ID from Available Threat Maps.
Response data
Returns a ranked list of malware families with prevalence (0–100, global spread) and opportunity (0–100, targeting relevance to your org) scores, plus watchlist-triggered log entries that explain why each family appears. Log entries track capability and intent signals over time per watchlist entity.