Connectors
...
Actions
Get File Hash Indicators
6 min
description get file hash indicators endpoint url api/v1/indicators/file/{{file hash}}/{{section}} method get inputs path parameters (object) – required file hash (string) – required section (string) – required output example \[ { "status code" 200, "response headers" { "content type" "application/json", "content length" "323", "connection" "keep alive", "date" "mon, 09 jan 2023 23 40 19 gmt", "server" "gunicorn", "cache control" "max age=0", "x frame options" "sameorigin", "x remote user name" "swimlane dev", "x otx active" "1", "content encoding" "gzip", "access control allow origin" " ", "vary" "accept encoding", "x cache" "miss from cloudfront", "via" "1 1 021fce58f4d2d5cc960cb6a0e0c04fc0 cloudfront net (cloudfront)", "x amz cf pop" "for50 p3", "x amz cf id" "3cxg4rsv u0g7twfsld9 gmss 5vmvnxvza1pphpfis8phdcbe 2ra==" }, "reason" "ok", "json body" { "sections" \[ "general", "analysis" ], "type" "sha1", "type title" "filehash sha1", "indicator" "6c5360d41bd2b14b1565f5b18e5c203cf512e493", "validation" \[], "base indicator" { "id" 2113706547, "indicator" "2eb14920c75d5e73264f77cfa273ad2c", "type" "filehash md5", "title" "", "description" "", "content" "", "access type" "public", "access reason" "" }, "pulse info" { "count" 0, "pulses" \[], "references" \[], "related" { "alienvault" { "adversary" \[], "malware families" \[], "industries" \[] }, "other" { "adversary" \[], "malware families" \[], "industries" \[] } } }, "false positive" \[] } } ] output parameters status code (number) reason (string) json body (object) sections (array) type (string) type title (string) indicator (string) validation (array) file name (string) – required file (string) – required base indicator (object) id (number) indicator (string) type (string) title (string) description (string) content (string) access type (string) access reason (string) pulse info (object) count (number) pulses (array) file name (string) – required file (string) – required references (array) file name (string) – required file (string) – required related (object) alienvault (object) adversary (array) file name (string) – required file (string) – required malware families (array) file name (string) – required file (string) – required industries (array) file name (string) – required file (string) – required other (object) adversary (array) file name (string) – required file (string) – required malware families (array) file name (string) – required file (string) – required industries (array) file name (string) – required file (string) – required false positive (array) file name (string) – required file (string) – required response headers header type content type string content length string connection string date string server string cache control string x frame options string x remote user name string x otx active string content encoding string access control allow origin string vary string x cache string via string x amz cf pop string x amz cf id string