What this endpoint does

Lists all Auto Sigma jobs created by the authenticated user. Use this to monitor multiple jobs or locate job IDs for Get Sigma Job, Delete Sigma Job, or Retry Sigma Job. Paginate with limit (default 10, max 1000) and offset. Note: the path uses POST with get_jobs naming, not a REST GET. Authentication: X-RFToken header to https://api.recordedfuture.com/malware-intelligence.

Response data

Returns every Auto Sigma job you've created — use this as your dashboard to track which jobs have finished generating Sigma rules, which are still processing, and which failed and need a retry. The family counts on each job show you at a glance which malware families were covered and how many samples matched, helping you assess coverage without fetching the full job details. Generated Sigma rules are intentionally excluded from this response — call Get Sigma Job for individual jobs to retrieve the actual rules.