What this endpoint does

This operation retrieves a paginated list of all Auto Sigma jobs created by the authenticated user, showing each job's status and summary statistics. Use this endpoint to monitor the progress of multiple jobs, find job IDs for use with other Auto Sigma endpoints, or review past job configurations. Results can be paginated using limit (default 10, max 1000) and offset parameters. To retrieve the full details of a specific job including its generated Sigma rules and behavioral patterns, use the Get Sigma Job endpoint with the individual job ID.

Response data

The response contains a jobs array of job summary objects. Each job includes its jobId, name, creation and modification timestamps, processing status (CREATED, RUNNING, FINISHED, or FAILED), the original query and date range used to select malware samples, the total nMatchedHashes count, and a familyCounts object showing the distribution of matched samples across malware families. This endpoint returns job metadata only — generated Sigma rules and behavioral patterns are only available through the Get Sigma Job endpoint for individual jobs.