What this endpoint does

Retrieves the status and metadata for a sandbox sample — the primary way to check whether analysis is complete and what tasks were executed. Poll the status field until it reaches reported (success) or failed. For event-driven monitoring instead of polling, use Sandbox: Stream Sample Events. Get your sampleID from Sandbox: Submit Sample or Sandbox: Search. Once reported, access results via Sandbox: Get Sample Overview (high-level verdict), Sandbox: Get Sample Summary (per-task metadata), or Sandbox: Get Dynamic Report (full behavioral analysis).

Response data

Returns the sample's current processing state and the list of analysis tasks the sandbox created for it. The status field is the key polling target — reported means all results are ready, pending or running mean analysis is in progress, failed means something went wrong. The tasks array shows each individual analysis task (e.g., behavioral1, static1, urlscan1) with its own status — use these task IDs when calling the dynamic report, static report, PCAP download, or task file download endpoints. The kind field tells you whether this was a file or url submission, which determines which download endpoints are available.