---
title: Intezer Analyze
slug: connectors/intezer-analyze
docTags: 
createdAt: 2026-06-09T16:30:26.087Z
---

Intezer Analyze is a cybersecurity platform that provides advanced malware analysis and threat intelligence through genetic code analysis.

Intezer Analyze is a powerful malware analysis platform that provides deep insights into the genetic origins of software, identifying code reuse and detecting threats. This connector allows Swimlane Turbine users to automate the submission and analysis of files and hashes, retrieve analysis results, and manage files within Intezer Analyze. By integrating with Intezer Analyze, Swimlane Turbine users can enhance their security operations with automated malware analysis, enabling faster threat detection and response, and improving overall security posture.

The Intezer Analyze Connector integrates with Swimlane to perform malware analysis of suspicious files and a variety of automated investigation process operations.

## Asset Setup or Prerequisites

Before you can use the Intezer Analyze connector for Turbine, you'll need access to the Intezer Analyze API. This requires the following:

- an API key authentication using the following parameters:
  - URL: The endpoint URL for accessing Intezer Analyze services.
  - API Key: A unique key provided by Intezer for authenticating API requests.

## Capabilities

This plugin provides the following capabilities:

- Analyze File
- Analyze by Hash
- Delete File by Hash
- Delete Index by Hash
- Download File
- Generate Vaccine
- Get Alert By ID
- Get Analysis Result
- Get Latest Hash Result
- Get Root Analysis Related Samples
- Get Sub Analysis Related Samples
- Get Sub-Analysis IDs
- Get Sub-Analyses Metadata
- Index Uploaded File
- Label File
  *... and so on*

## Notes

- For more information on Intezer Analyze Connector is found at:
  [Intezer Analyze Main Site](https://analyze.intezer.com/api-docs.html#/)
- For more information on Intezer Analyze Authentication, [check here](https://analyze.intezer.com/api-docs.html#/operations/app/get-access-token)

# Configurations

## Intezer Analyze API Key Authentication

Authenticates using an Intezer Analyze API Key

### Configuration Parameters

| **Parameter** | **Description**                    | **Type** | **Required** |
| ------------- | ---------------------------------- | -------- | ------------ |
| url           | A URL to the target host.          | string   | Required     |
| apikey        | API key                            | string   | Required     |
| verify\_ssl   | Verify SSL certificate             | boolean  | Optional     |
| http\_proxy   | A proxy to route requests through. | string   | Optional     |

# Actions

## Analyze by Hash

Submit a file's hash to Intezer Analyze for analysis without uploading the actual file. Requires the hash in JSON body.

### Endpoint

- **URL:** `/api/v2-0/analyze-by-hash`
- **Method:** `POST`

### Input

| **Argument Name**                | **Type** | **Required** | **Description**               |
| -------------------------------- | -------- | ------------ | ----------------------------- |
| `hash`                           | string   | Optional     | Parameter for Analyze by Hash |
| `file_name`                      | string   | Optional     | Name of the resource          |
| `code_item_type`                 | string   | Optional     | Type of the resource          |
| `disable_dynamic_execution`      | boolean  | Optional     | Parameter for Analyze by Hash |
| `disable_static_extraction`      | boolean  | Optional     | Parameter for Analyze by Hash |
| `sandbox_command_line_arguments` | string   | Optional     | Parameter for Analyze by Hash |

### Input Example

`{"json_body":{"hash":"stringstringstringstringstringst","file_name":"malicious.exe","code_item_type":"file","disable_dynamic_execution":false,"disable_static_extraction":false,"sandbox_command_line_arguments":"string"}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |
| `status`      | string   | Status value                     |
| `result_url`  | string   | URL endpoint for the request     |
| `result`      | object   | Result of the operation          |

### Output Example

`{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"status":"succeeded","result_url":"string","result":null}}`

## Analyze File

Submit a file for analysis in Intezer Analyze using the provided attachments.

### Endpoint

- **URL:** `/api/v2-0/analyze`
- **Method:** `POST`

### Input

| **Argument Name** | **Type** | **Required** | **Description**            |
| ----------------- | -------- | ------------ | -------------------------- |
| `attachments`     | object   | Required     | Parameter for Analyze File |

### Input Example

`{"attachments":{}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |
| `status`      | string   | Status value                     |
| `result_url`  | string   | URL endpoint for the request     |
| `result`      | object   | Result of the operation          |

### Output Example

`{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"status":"succeeded","result_url":"string","result":null}}`

## Delete File by Hash

Delete a private file from Intezer's storage using its hash value.

### Endpoint

- **URL:** `/api/v2-0/files/{{hash_value}}`
- **Method:** `DELETE`

### Input

| **Argument Name**            | **Type** | **Required** | **Description**                               |
| ---------------------------- | -------- | ------------ | --------------------------------------------- |
| `path_parameters.hash_value` | string   | Required     | Parameters for the Delete File by Hash action |

### Input Example

`{"path_parameters":{"hash_value":"sha256"}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |
| `status`      | string   | Status value                     |
| `result_url`  | string   | URL endpoint for the request     |
| `result`      | object   | Result of the operation          |

### Output Example

`{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"status":"succeeded","result_url":"string","result":null}}`

## Delete Index by Hash

Delete the private indexing for a file in Intezer Analyze using its SHA256 hash.

### Endpoint

- **URL:** `/api/v2-0/files/{{sha256}}/index`
- **Method:** `DELETE`

### Input

| **Argument Name**        | **Type** | **Required** | **Description**                                |
| ------------------------ | -------- | ------------ | ---------------------------------------------- |
| `path_parameters.sha256` | string   | Required     | Parameters for the Delete Index by Hash action |

### Input Example

`{"path_parameters":{"sha256":"sha256"}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |
| `result_url`  | string   | URL endpoint for the request     |

### Output Example

`{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result_url":"/tasks/5ffa5925-b651-4cca-9e15-92ee84ea4ad3"}}`

## Download a File

Download the SHA256 equivalent of a file from Intezer Analyze for further investigation. Requires path parameter 'sha256'.

### Endpoint

- **URL:** `/api/v2-0/files/{{sha256}}/download`
- **Method:** `GET`

### Input

| **Argument Name**        | **Type** | **Required** | **Description**                           |
| ------------------------ | -------- | ------------ | ----------------------------------------- |
| `headers`                | object   | Optional     | HTTP headers for the request              |
| `headers.Accept`         | string   | Optional     | HTTP headers for the request              |
| `path_parameters.sha256` | string   | Required     | Parameters for the Download a File action |

### Input Example

`{"headers":{"Accept":"application/octet-stream"},"path_parameters":{"sha256":""}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{}}`

## Generate Vaccine

Generate a vaccine for a specific file in Intezer Analyze using the analysis ID as a path parameter.

### Endpoint

- **URL:** `/api/v2-0/analyses/{{analysis_id}}/sub-analyses/root/generate-vaccine`
- **Method:** `POST`

### Input

| **Argument Name**             | **Type** | **Required** | **Description**                            |
| ----------------------------- | -------- | ------------ | ------------------------------------------ |
| `path_parameters.analysis_id` | string   | Required     | Parameters for the Generate Vaccine action |
| `format`                      | string   | Optional     | Parameter for Generate Vaccine             |

### Input Example

`{"json_body":{"format":"yara"},"path_parameters":{"analysis_id":""}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |
| `result`      | string   | Result of the operation          |
| `result_url`  | string   | URL endpoint for the request     |
| `status`      | string   | Status value                     |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":"rule Intezer_Vaccine_bf293bda73c5b4c1ec66561ad20d7e2bc6692d051282d35ce8b7b7020c7...","result_url":"/analyses/0833e33b-2dcd-4d48-a853-8b4822675911/sub-analyses/e1aba630-e390-4964-b...","status":"succeeded"}}`

## Get Alert By ID

Retrieve triage and response information for an ingested alert in Intezer Analyze using its alert ID.

### Endpoint

- **URL:** `/api/v2-0/alerts/get-by-id`
- **Method:** `POST`

### Input

| **Argument Name** | **Type** | **Required** | **Description**                                 |
| ----------------- | -------- | ------------ | ----------------------------------------------- |
| `alert_id`        | string   | Optional     | The unique identifier of the alert to retrieve. |

### Input Example

`{"json_body":{"alert_id":"ed638299999999862495_-1864999299"}}`

### Output

| **Parameter**                                | **Type** | **Description**                  |
| -------------------------------------------- | -------- | -------------------------------- |
| `status_code`                                | number   | HTTP status code of the response |
| `reason`                                     | string   | Response reason phrase           |
| `result`                                     | object   | Result of the operation          |
| `result.alert_id`                            | string   | Unique identifier                |
| `result.intezer_alert_url`                   | string   | URL endpoint for the request     |
| `result.alert`                               | object   | Result of the operation          |
| `result.alert.alert_id`                      | string   | Unique identifier                |
| `result.alert.alert_title`                   | string   | Result of the operation          |
| `result.alert.alert_url`                     | string   | URL endpoint for the request     |
| `result.alert.creation_time`                 | string   | Result of the operation          |
| `result.alert.creation_time_display`         | string   | Result of the operation          |
| `result.alert.severity`                      | string   | Result of the operation          |
| `result.alert.severity_display`              | string   | Result of the operation          |
| `result.alert.is_mitigated`                  | boolean  | Result of the operation          |
| `result.alert.mitigation_status_display`     | string   | Status value                     |
| `result.alert.device`                        | object   | Result of the operation          |
| `result.alert.device.id`                     | string   | Unique identifier                |
| `result.alert.device.hostname`               | string   | Name of the resource             |
| `result.alert.device.os_type`                | string   | Type of the resource             |
| `result.alert.device.os_name`                | string   | Name of the resource             |
| `result.triage_result`                       | object   | Result of the operation          |
| `result.triage_result.alert_verdict`         | string   | Result of the operation          |
| `result.triage_result.alert_verdict_display` | string   | Result of the operation          |
| `result.triage_result.risk_level`            | string   | Result of the operation          |
| `result.triage_result.risk_level_display`    | string   | Result of the operation          |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"alert_id":"ed638299999999862495_-1864999299","intezer_alert_url":"https://analyze.intezer.com/alerts/ed638299999999862495_-1864999299","alert":{},"triage_result":{},"source":"cs","source_display":"CrowdStrike","source_type":"edr","status":"done"},"status":"succeeded"}}`

## Get Analysis Result

Retrieve a summary of file analysis results in Intezer Analyze using the analysis\_id path parameter.

### Endpoint

- **URL:** `/api/v2-0/analyses/{{analysis_id}}`
- **Method:** `GET`

### Input

| **Argument Name**             | **Type** | **Required** | **Description**                               |
| ----------------------------- | -------- | ------------ | --------------------------------------------- |
| `path_parameters.analysis_id` | string   | Required     | Parameters for the Get Analysis Result action |

### Input Example

`{"path_parameters":{"analysis_id":""}}`

### Output

| **Parameter**          | **Type** | **Description**                  |
| ---------------------- | -------- | -------------------------------- |
| `status_code`          | number   | HTTP status code of the response |
| `reason`               | string   | Response reason phrase           |
| `result`               | object   | Result of the operation          |
| `result.analysis_id`   | string   | Unique identifier                |
| `result.analysis_time` | string   | Result of the operation          |
| `result.analysis_url`  | string   | URL endpoint for the request     |
| `result.family_id`     | string   | Unique identifier                |
| `result.family_name`   | string   | Name of the resource             |
| `result.file_name`     | string   | Name of the resource             |
| `result.is_private`    | boolean  | Result of the operation          |
| `result.labels`        | array    | Result of the operation          |
| `result.sha256`        | string   | Result of the operation          |
| `result.sub_verdict`   | string   | Result of the operation          |
| `result.verdict`       | string   | Result of the operation          |
| `result_url`           | string   | URL endpoint for the request     |
| `status`               | string   | Status value                     |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"analysis_id":"0833e33b-2dcd-4d48-a853-8b4822675911","analysis_time":"Wed, 17 Oct 2018 15:16:45 GMT","analysis_url":"https://analyze.intezer.com/analyses/0833e33b-2dcd-4d48-a853-8b4822675911","family_id":"0b13c0d4-7779-4c06-98fa-4d33ca98f8a9","family_name":"WannaCry","file_name":"file.exe","is_private":true,"labels":[],"sha25...`

## Get Latest Hash Result

Retrieve the latest analysis results for a file in Intezer Analyze by specifying its hash value.

### Endpoint

- **URL:** `/api/v2-0/files/{{hash_value}}`
- **Method:** `GET`

### Input

| **Argument Name**                   | **Type** | **Required** | **Description**                                  |
| ----------------------------------- | -------- | ------------ | ------------------------------------------------ |
| `path_parameters.hash_value`        | string   | Required     | Parameters for the Get Latest Hash Result action |
| `should_get_only_private_analysis`  | string   | Optional     | Parameter for Get Latest Hash Result             |
| `should_get_only_composed_analysis` | string   | Optional     | Parameter for Get Latest Hash Result             |

### Input Example

`{"json_body":{"should_get_only_private_analysis":"false","should_get_only_composed_analysis":"true"},"path_parameters":{"hash_value":"SHA256"}}`

### Output

| **Parameter**          | **Type** | **Description**                  |
| ---------------------- | -------- | -------------------------------- |
| `status_code`          | number   | HTTP status code of the response |
| `reason`               | string   | Response reason phrase           |
| `result`               | object   | Result of the operation          |
| `result.analysis_id`   | string   | Unique identifier                |
| `result.analysis_time` | string   | Result of the operation          |
| `result.analysis_url`  | string   | URL endpoint for the request     |
| `result.family_id`     | string   | Unique identifier                |
| `result.family_name`   | string   | Name of the resource             |
| `result.file_name`     | string   | Name of the resource             |
| `result.is_private`    | boolean  | Result of the operation          |
| `result.labels`        | array    | Result of the operation          |
| `result.sha256`        | string   | Result of the operation          |
| `result.sub_verdict`   | string   | Result of the operation          |
| `result.verdict`       | string   | Result of the operation          |
| `result_url`           | string   | URL endpoint for the request     |
| `status`               | string   | Status value                     |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"analysis_id":"0833e33b-2dcd-4d48-a853-8b4822675911","analysis_time":"Wed, 17 Oct 2018 15:16:45 GMT","analysis_url":"https://analyze.intezer.com/analyses/0833e33b-2dcd-4d48-a853-8b4822675911","family_id":"0b13c0d4-7779-4c06-98fa-4d33ca98f8a9","family_name":"WannaCry","file_name":"file.exe","is_private":true,"labels":[],"sha25...`

## Get Root Analysis Related Samples

Get a list of public samples from the Intezer Genome Database that share code with the detected family in the analyzed file. Requires analysis\_id and family\_id as path parameters.

### Endpoint

- **URL:** `/api/v2-0/analyses/{{analysis_id}}/sub-analyses/root/code-reuse/families/{{family_id}}/find-related-files`
- **Method:** `POST`

### Input

| **Argument Name**             | **Type** | **Required** | **Description**                                             |
| ----------------------------- | -------- | ------------ | ----------------------------------------------------------- |
| `path_parameters.analysis_id` | string   | Required     | Parameters for the Get Root Analysis Related Samples action |
| `path_parameters.family_id`   | string   | Required     | Parameters for the Get Root Analysis Related Samples action |

### Input Example

`{"path_parameters":{"analysis_id":"string","family_id":"string"}}`

### Output

| **Parameter**                    | **Type** | **Description**                  |
| -------------------------------- | -------- | -------------------------------- |
| `status_code`                    | number   | HTTP status code of the response |
| `reason`                         | string   | Response reason phrase           |
| `result`                         | object   | Result of the operation          |
| `result.files`                   | array    | Result of the operation          |
| `result.files.reused_gene_count` | number   | Result of the operation          |
| `result.files.sha256`            | string   | Result of the operation          |
| `result.files.size_in_bytes`     | number   | Result of the operation          |
| `result_url`                     | string   | URL endpoint for the request     |
| `status`                         | string   | Status value                     |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"files":[]},"result_url":"/analyses/513555bd-1113-4079-80ff-c968e40bea16/sub-analyses/479d81e8-b6ba-4c13-8...","status":"succeeded"}}`

## Get Sub Analyses Metadata

Get the root analysis sample's metadata in Intezer Analyze using the analysis ID as a path parameter.

### Endpoint

- **URL:** `/api/v2-0/analyses/{{analysis_id}}/sub-analyses/root/metadata`
- **Method:** `GET`

### Input

| **Argument Name**             | **Type** | **Required** | **Description**                                     |
| ----------------------------- | -------- | ------------ | --------------------------------------------------- |
| `path_parameters.analysis_id` | string   | Required     | Parameters for the Get Sub Analyses Metadata action |

### Input Example

`{"path_parameters":{"analysis_id":""}}`

### Output

| **Parameter**                | **Type** | **Description**                           |
| ---------------------------- | -------- | ----------------------------------------- |
| `status_code`                | number   | HTTP status code of the response          |
| `reason`                     | string   | Response reason phrase                    |
| `architecture`               | string   | Output field: architecture                |
| `company`                    | string   | Output field: company                     |
| `compilation_timestamp`      | string   | Output field: compilation\_timestamp      |
| `file_type`                  | string   | Type of the resource                      |
| `md5`                        | string   | Output field: md5                         |
| `original_filename`          | string   | Name of the resource                      |
| `product`                    | string   | Output field: product                     |
| `product_version`            | string   | Output field: product\_version            |
| `sha1`                       | string   | Output field: sha1                        |
| `sha256`                     | string   | Output field: sha256                      |
| `size_in_bytes`              | number   | Output field: size\_in\_bytes             |
| `ssdeep`                     | string   | Output field: ssdeep                      |
| `indicators`                 | array    | Output field: indicators                  |
| `indicators.name`            | string   | Name of the resource                      |
| `indicators.classification`  | string   | Output field: indicators.classification   |
| `indicators.additional_info` | string   | Output field: indicators.additional\_info |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"architecture":"i386","company":"Microsoft Corporation","compilation_timestamp":"2014:02:06 12:37:44+00:00","file_type":"pe","md5":"ec7e3cfaeaac0401316d66e964be684e","original_filename":"cryptsp.dll","product":"Microsoft\u00ae Windows\u00ae Operating System","product_version":"6.1.7600.16385","sha1":"dbda26c8dfbd511fd048a89a0d0dd300df3...`

## Get Sub Analysis IDs

Retrieve a list of sub-analysis IDs for a given analysis ID in Intezer Analyze, including the root file's sub-analysis ID. Requires the analysis\_id as a path parameter.

### Endpoint

- **URL:** `/api/v2-0/analyses/{{analysis_id}}/sub-analyses`
- **Method:** `GET`

### Input

| **Argument Name**             | **Type** | **Required** | **Description**                                |
| ----------------------------- | -------- | ------------ | ---------------------------------------------- |
| `path_parameters.analysis_id` | string   | Required     | Parameters for the Get Sub Analysis IDs action |

### Input Example

`{"path_parameters":{"analysis_id":""}}`

### Output

| **Parameter**                                     | **Type** | **Description**                                                   |
| ------------------------------------------------- | -------- | ----------------------------------------------------------------- |
| `status_code`                                     | number   | HTTP status code of the response                                  |
| `reason`                                          | string   | Response reason phrase                                            |
| `sub_analyses`                                    | array    | Output field: sub\_analyses                                       |
| `sub_analyses.sha256`                             | string   | Output field: sub\_analyses.sha256                                |
| `sub_analyses.source`                             | string   | Output field: sub\_analyses.source                                |
| `sub_analyses.sub_analysis_id`                    | string   | Unique identifier                                                 |
| `sub_analyses.extraction_info`                    | object   | Output field: sub\_analyses.extraction\_info                      |
| `sub_analyses.extraction_info.dropped_path`       | string   | Output field: sub\_analyses.extraction\_info.dropped\_path        |
| `sub_analyses.extraction_info.parent_file_sha256` | string   | Output field: sub\_analyses.extraction\_info.parent\_file\_sha256 |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"sub_analyses":[{"sha256":"14ca4a614156e924d077e1bf6709cd24796a1ddc92aa1ac9c0b85103fea943bd","source":"root","sub_analysis_id":"ae0ad225-4f37-43ce-8ffd-a7771b896a36"},{"extraction_info":{"collected_from":"memory","processes":[{"module_path":"C:\\Users\\WMJI\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ddnvojbl....`

## Get Sub Analysis Related Samples

Retrieve a list of public samples from the Intezer Genome Database that share code with the detected family in the analyzed file. Requires analysis\_id, family\_id, and sub\_analysis\_id.

### Endpoint

- **URL:** `/api/v2-0/analyses/{{analysis_id}}/sub-analyses/{{sub_analysis_id}}/code-reuse/families/{{family_id}}/find-related-files`
- **Method:** `POST`

### Input

| **Argument Name**                 | **Type** | **Required** | **Description**                                            |
| --------------------------------- | -------- | ------------ | ---------------------------------------------------------- |
| `path_parameters.analysis_id`     | string   | Required     | Parameters for the Get Sub Analysis Related Samples action |
| `path_parameters.family_id`       | string   | Required     | Parameters for the Get Sub Analysis Related Samples action |
| `path_parameters.sub_analysis_id` | string   | Required     | Parameters for the Get Sub Analysis Related Samples action |

### Input Example

`{"path_parameters":{"analysis_id":"","family_id":"","sub_analysis_id":""}}`

### Output

| **Parameter**                    | **Type** | **Description**                  |
| -------------------------------- | -------- | -------------------------------- |
| `status_code`                    | number   | HTTP status code of the response |
| `reason`                         | string   | Response reason phrase           |
| `result`                         | object   | Result of the operation          |
| `result.files`                   | array    | Result of the operation          |
| `result.files.reused_gene_count` | number   | Result of the operation          |
| `result.files.sha256`            | string   | Result of the operation          |
| `result.files.size_in_bytes`     | number   | Result of the operation          |
| `result_url`                     | string   | URL endpoint for the request     |
| `status`                         | string   | Status value                     |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"files":[]},"result_url":"/analyses/513555bd-1113-4079-80ff-c968e40bea16/sub-analyses/479d81e8-b6ba-4c13-8...","status":"succeeded"}}`

## Index Uploaded File

Upload a file to Intezer Analyze and index it into your private Genome Database. Supported classifications include malicious and trusted.

### Endpoint

- **URL:** `/api/v2-0/files/index`
- **Method:** `POST`

### Input

| **Argument Name** | **Type** | **Required** | **Description**                         |
| ----------------- | -------- | ------------ | --------------------------------------- |
| `attachments`     | object   | Required     | File that you want to submit or upload. |

### Input Example

`{"attachments":{}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |
| `result`      | object   | Result of the operation          |
| `result_url`  | string   | URL endpoint for the request     |
| `status`      | string   | Status value                     |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{},"result_url":"/files/index/7c9b8902-7176-41f8-bcaf-b0fd4c395f78","status":"succeeded"}}`

## label file

Set a private label for a file in Intezer Analyze using the SHA256 path parameter and label in the JSON body.

### Endpoint

- **URL:** `/api/v2-0/files/{{sha256}}/label`
- **Method:** `PUT`

### Input

| **Argument Name**        | **Type** | **Required** | **Description**                      |
| ------------------------ | -------- | ------------ | ------------------------------------ |
| `path_parameters.sha256` | string   | Required     | Parameters for the label file action |
| `label`                  | string   | Optional     | Parameter for label file             |

### Input Example

`{"json_body":{"label":""},"path_parameters":{"sha256":""}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |
| `result_url`  | string   | URL endpoint for the request     |

### Output Example

`{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result_url":"/tasks/5ffa5925-b651-4cca-9e15-92ee84ea4ad3"}}`

## Post Index Hash

Index a file into your private Genome Database in Intezer Analyze using the SHA256 hash and specify how to index it.

### Endpoint

- **URL:** `/api/v2-0/files/{{sha256}}/index`
- **Method:** `POST`

### Input

| **Argument Name**        | **Type** | **Required** | **Description**                           |
| ------------------------ | -------- | ------------ | ----------------------------------------- |
| `path_parameters.sha256` | string   | Required     | Parameters for the Post Index Hash action |
| `index_as`               | string   | Optional     | Parameter for Post Index Hash             |
| `family_name`            | string   | Optional     | Name of the resource                      |

### Input Example

`{"json_body":{"index_as":"trusted","family_name":"Good Fam"},"path_parameters":{"sha256":""}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |
| `result`      | object   | Result of the operation          |
| `result_url`  | string   | URL endpoint for the request     |
| `status`      | string   | Status value                     |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{},"result_url":"/files/index/7c9b8902-7176-41f8-bcaf-b0fd4c395f78","status":"succeeded"}}`

## Search Incidents

Search for incidents in Intezer Analyze using provided incident IDs and retrieve their triage and response details.

### Endpoint

- **URL:** `/api/v2-0/incidents/search`
- **Method:** `POST`

### Input

| **Argument Name** | **Type** | **Required** | **Description**                                        |
| ----------------- | -------- | ------------ | ------------------------------------------------------ |
| `incident_ids`    | array    | Optional     | List of incident IDs to search for in Intezer Analyze. |

### Input Example

`{"json_body":{"incident_ids":["incident-1234"]}}`

### Output

| **Parameter**                                          | **Type** | **Description**                  |
| ------------------------------------------------------ | -------- | -------------------------------- |
| `status_code`                                          | number   | HTTP status code of the response |
| `reason`                                               | string   | Response reason phrase           |
| `result`                                               | object   | Result of the operation          |
| `result.incident_count`                                | number   | Unique identifier                |
| `result.incidents`                                     | array    | Unique identifier                |
| `result.incidents.incident_id`                         | string   | Unique identifier                |
| `result.incidents.intezer_incident_url`                | string   | URL endpoint for the request     |
| `result.incidents.alert_count`                         | number   | Unique identifier                |
| `result.incidents.alert_ids`                           | array    | Unique identifier                |
| `result.incidents.creation_time`                       | string   | Unique identifier                |
| `result.incidents.creation_time_display`               | string   | Unique identifier                |
| `result.incidents.status`                              | string   | Unique identifier                |
| `result.incidents.triage_result`                       | object   | Unique identifier                |
| `result.incidents.triage_result.risk_level`            | string   | Unique identifier                |
| `result.incidents.triage_result.risk_level_display`    | string   | Unique identifier                |
| `result.incidents.triage_result.risk_category`         | string   | Unique identifier                |
| `result.incidents.triage_result.risk_category_display` | string   | Unique identifier                |
| `result.incidents.triage_result.risk_score`            | number   | Unique identifier                |
| `result.incidents.source`                              | string   | Unique identifier                |
| `result.incidents.source_display`                      | string   | Unique identifier                |
| `result.incidents.source_type`                         | string   | Unique identifier                |
| `status`                                               | string   | Status value                     |

### Output Example

`{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"incident_count":1,"incidents":[]},"status":"succeeded"}}`

# Response Headers

| **Header**     | **Description**                                       | **Example**                   |
| -------------- | ----------------------------------------------------- | ----------------------------- |
| content-length | The length of the response body in bytes              | 140                           |
| content-type   | The media type of the resource                        | application/json              |
| Date           | The date and time at which the message was originated | Wed, 13 Dec 2023 20:37:23 GMT |