What this endpoint does

Lists samples submitted to the sandbox, paginated in reverse chronological order. Filter by ownership with the subset parameter: owned (your submissions, the default), org (your entire organization), or public (all publicly visible samples on the public cloud). This is a chronological listing — for filtered queries by hash, family, or other criteria, use Sandbox: Search instead. Use sample IDs from this listing with Sandbox: Get Sample for detailed status, or go directly to report endpoints like Sandbox: Get Sample Overview. Important: the offset parameter is not a numeric offset — it's an opaque cursor string (looks like an ISO 8601 timestamp) returned in the next field of the previous response.

Response data

Returns a reverse-chronological list of your sandbox submissions with their current processing state. Each entry tells you whether analysis is still running, completed, or failed, and whether it was a file or URL submission. Use the status field to identify samples that need attention — failed means something went wrong, pending or running means results aren't ready yet. Paginate by passing the next value as the offset query parameter; when next is absent, you've reached the end. Max 200 items per page, default 50.

200Paginated list of samples.

400Bad request.