Threat Maps: Threat Actor Search

Search Recorded Future's threat actor database by name, alias, or classification.

Body Params

JSON object specifying pagination of the threat actor list

string

This string value can be used for a case insensitive, free text search of threat actor names, common names, or aliases. For example, using name":"panda" will yield a search result with over 300 threat actors that have the word "panda" somewhere in its name, common names, or aliases. Advanced searches are supported using a prefix in the search string. For example, using "name":"exact:panda"yields only threat actor(s) whose name is just "Panda".

PrefixMatch typeDescription
no prefixfreetext match (default)Returns threat actors where the search string matches somewhere in a name, a common name or an alias (case-insensitive).
exact:exact matchReturns threat actors where the search string exactly matches a name, a common name or an alias.
prefix:prefix matchReturns threat actors where the search string matches the beginning of a name, a common name or an alias.
infix:infix matchReturns threat actors where the search string is contained anywhere in a name, a common name or an alias.
relevance:1 word: relevance match
2+ words: relevance phrase match
Returns threat actors that have text attributes relevant to the given search word or search phrase (in the same order). The results are sorted by decreasing relevance.

int32
required
1 to 10000
Defaults to 10000

This integer value sets the upper limit on the number of threat actors returned.

string

This string value should be received in a prior search, and is used to deliver the next set of threat actors in the search response.

Response

Language
Credentials
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json