What this endpoint does

Retrieves the current status and metadata for a malware analysis sample submitted to Recorded Future Sandbox. This is the primary endpoint for polling analysis progress after submitting a sample via the Sandbox: Submit Sample endpoint. The sample ID returned at submission time is used to track the analysis through its lifecycle — from pending through running to reported (complete). This endpoint is also useful for verifying a sample exists before calling other endpoints like Sandbox: Download Sample or Sandbox: Get Sample Overview.

Response data

Returns the sample's overall status, submission kind (file or URL), submission timestamp, and an array of individual analysis tasks (such as static analysis, behavioral analysis, and URL scanning) each with their own status. For file submissions, includes the original filename and SHA-256 hash; for URL submissions, includes the submitted URL. Once all analysis tasks complete, a completed timestamp is added and the overall status changes to "reported."