Search threat

get

https://ic.armis.com/api/v1/threat/_search

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Query Params

from

integer

≥ 0

Defaults to 0

When paginating, determines from which index to retrieve results.

length

integer

0 to 1000

Defaults to 10

When paginating, determines how many results to retrieve.

groupBy

array of strings

Specify which fields should the calculations be grouped by. If omitted, assumes all fields are selected.

groupBy

calculate

array of strings

Specify which calculations to perform. If omitted, assumes all calculations are selected.

calculate

orderBy

array of strings

Specify by which field / calculation the results should be ordered. If omitted, assumes all calculations are used in a descending order.

orderBy

timestamp

array of strings

Filter timestamp to be equal to the provided value.

timestamp

timestamp[eq]

array of strings

Filter timestamp to be equal to the provided value.

timestamp[eq]

timestamp[ge]

array of strings

Filter timestamp to be greater than or equal to the provided value.

timestamp[ge]

timestamp[lt]

array of strings

Filter timestamp to be lower than the provided value.

timestamp[lt]

timestamp[gt]

array of strings

Filter timestamp to be greater than the provided value.

timestamp[gt]

timestamp[le]

array of strings

Filter timestamp to be lower than or equal to the provided value.

timestamp[le]

type

array of objects

Filter type to be equal to the provided value.

type

type[eq]

array of strings

Filter type to be equal to the provided value.

type[eq]

type[ne]

array of strings

Filter type to be not equal to the provided value.

type[ne]

host

array of strings

Filter host to be equal to the provided value.

host

host[ne]

array of strings

Filter host to be not equal to the provided value.

host[ne]

host[eq]

array of strings

Filter host to be equal to the provided value.

host[eq]

host[like]

array of strings

Filter host with a wildcard (%) to match the provided value.

host[like]

host[nlike]

array of strings

Filter host with a wildcard (%) to not match the provided value.

host[nlike]

direction

array of objects

Filter direction to be equal to the provided value.

direction

direction[eq]

array of strings

Filter direction to be equal to the provided value.

direction[eq]

direction[ne]

array of strings

Filter direction to be not equal to the provided value.

direction[ne]

cve.id

array of strings

Filter cve.id to be equal to the provided value.

cve.id

cve.id[ne]

array of strings

Filter cve.id to be not equal to the provided value.

cve.id[ne]

cve.id[eq]

array of strings

Filter cve.id to be equal to the provided value.

cve.id[eq]

cve.id[like]

array of strings

Filter cve.id with a wildcard (%) to match the provided value.

cve.id[like]

cve.id[nlike]

array of strings

Filter cve.id with a wildcard (%) to not match the provided value.

cve.id[nlike]

cve.description

array of strings

Filter cve.description to be equal to the provided value.

cve.description

cve.description[ne]

array of strings

Filter cve.description to be not equal to the provided value.

cve.description[ne]

cve.description[eq]

array of strings

Filter cve.description to be equal to the provided value.

cve.description[eq]

cve.description[like]

array of strings

Filter cve.description with a wildcard (%) to match the provided value.

cve.description[like]

cve.description[nlike]

array of strings

Filter cve.description with a wildcard (%) to not match the provided value.

cve.description[nlike]

cve.severity

array of objects

Filter cve.severity to be equal to the provided value.

cve.severity

cve.severity[ne]

array of strings

Filter cve.severity to be not equal to the provided value.

cve.severity[ne]

cve.severity[eq]

array of strings

Filter cve.severity to be equal to the provided value.

cve.severity[eq]

cve.severity[ge]

array of strings

Filter cve.severity to be greater than or equal to the provided value.

cve.severity[ge]

cve.severity[lt]

array of strings

Filter cve.severity to be lower than the provided value.

cve.severity[lt]

cve.severity[gt]

array of strings

Filter cve.severity to be greater than the provided value.

cve.severity[gt]

cve.severity[le]

array of strings

Filter cve.severity to be lower than or equal to the provided value.

cve.severity[le]

cve.score

array of floats

Filter cve.score to be equal to the provided value.

cve.score

cve.score[ne]

array of floats

Filter cve.score to be not equal to the provided value.

cve.score[ne]

cve.score[eq]

array of floats

Filter cve.score to be equal to the provided value.

cve.score[eq]

cve.score[ge]

array of floats

Filter cve.score to be greater than or equal to the provided value.

cve.score[ge]

cve.score[lt]

array of floats

Filter cve.score to be lower than the provided value.

cve.score[lt]

cve.score[gt]

array of floats

Filter cve.score to be greater than the provided value.

cve.score[gt]

cve.score[le]

array of floats

Filter cve.score to be lower than or equal to the provided value.

cve.score[le]

cve.published

array of dates

Filter cve.published to be equal to the provided value.

cve.published

cve.published[eq]

array of dates

Filter cve.published to be equal to the provided value.

cve.published[eq]

cve.published[ge]

array of dates

Filter cve.published to be greater than or equal to the provided value.

cve.published[ge]

cve.published[lt]

array of dates

Filter cve.published to be lower than the provided value.

cve.published[lt]

cve.published[gt]

array of dates

Filter cve.published to be greater than the provided value.

cve.published[gt]

cve.published[le]

array of dates

Filter cve.published to be lower than or equal to the provided value.

cve.published[le]

cve.matchStatus

array of objects

Filter cve.matchStatus to be equal to the provided value.

cve.matchStatus

cve.matchStatus[eq]

array of strings

Filter cve.matchStatus to be equal to the provided value.

cve.matchStatus[eq]

cve.matchStatus[ne]

array of strings

Filter cve.matchStatus to be not equal to the provided value.

cve.matchStatus[ne]

cve.earlyWarning

array of booleans

Filter cve.earlyWarning to be equal to the provided value.

cve.earlyWarning

cve.earlyWarning[eq]

array of booleans

Filter cve.earlyWarning to be equal to the provided value.

cve.earlyWarning[eq]

cve.earlyWarningDateAdded

array of dates

Filter cve.earlyWarningDateAdded to be equal to the provided value.

cve.earlyWarningDateAdded

cve.earlyWarningDateAdded[eq]

array of dates

Filter cve.earlyWarningDateAdded to be equal to the provided value.

cve.earlyWarningDateAdded[eq]

cve.earlyWarningDateAdded[ge]

array of dates

Filter cve.earlyWarningDateAdded to be greater than or equal to the provided value.

cve.earlyWarningDateAdded[ge]

cve.earlyWarningDateAdded[lt]

array of dates

Filter cve.earlyWarningDateAdded to be lower than the provided value.

cve.earlyWarningDateAdded[lt]

cve.earlyWarningDateAdded[gt]

array of dates

Filter cve.earlyWarningDateAdded to be greater than the provided value.

cve.earlyWarningDateAdded[gt]

cve.earlyWarningDateAdded[le]

array of dates

Filter cve.earlyWarningDateAdded to be lower than or equal to the provided value.

cve.earlyWarningDateAdded[le]

cve.weaponized

array of booleans

Filter cve.weaponized to be equal to the provided value.

cve.weaponized

cve.weaponized[eq]

array of booleans

Filter cve.weaponized to be equal to the provided value.

cve.weaponized[eq]

cve.hasRansomware

array of booleans

Filter cve.hasRansomware to be equal to the provided value.

cve.hasRansomware

cve.hasRansomware[eq]

array of booleans

Filter cve.hasRansomware to be equal to the provided value.

cve.hasRansomware[eq]

cve.reportedByGoogleZeroDays

array of booleans

Filter cve.reportedByGoogleZeroDays to be equal to the provided value.

cve.reportedByGoogleZeroDays

cve.reportedByGoogleZeroDays[eq]

array of booleans

Filter cve.reportedByGoogleZeroDays to be equal to the provided value.

cve.reportedByGoogleZeroDays[eq]

cve.cisaDueDate

array of dates

Filter cve.cisaDueDate to be equal to the provided value.

cve.cisaDueDate

cve.cisaDueDate[eq]

array of dates

Filter cve.cisaDueDate to be equal to the provided value.

cve.cisaDueDate[eq]

cve.cisaDueDate[ge]

array of dates

Filter cve.cisaDueDate to be greater than or equal to the provided value.

cve.cisaDueDate[ge]

cve.cisaDueDate[lt]

array of dates

Filter cve.cisaDueDate to be lower than the provided value.

cve.cisaDueDate[lt]

cve.cisaDueDate[gt]

array of dates

Filter cve.cisaDueDate to be greater than the provided value.

cve.cisaDueDate[gt]

cve.cisaDueDate[le]

array of dates

Filter cve.cisaDueDate to be lower than or equal to the provided value.

cve.cisaDueDate[le]

cve.numberOfReferences

array of numbers

Filter cve.numberOfReferences to be equal to the provided value.

cve.numberOfReferences

cve.numberOfReferences[ne]

array of numbers

Filter cve.numberOfReferences to be not equal to the provided value.

cve.numberOfReferences[ne]

cve.numberOfReferences[eq]

array of numbers

Filter cve.numberOfReferences to be equal to the provided value.

cve.numberOfReferences[eq]

cve.numberOfReferences[ge]

array of numbers

Filter cve.numberOfReferences to be greater than or equal to the provided value.

cve.numberOfReferences[ge]

cve.numberOfReferences[lt]

array of numbers

Filter cve.numberOfReferences to be lower than the provided value.

cve.numberOfReferences[lt]

cve.numberOfReferences[gt]

array of numbers

Filter cve.numberOfReferences to be greater than the provided value.

cve.numberOfReferences[gt]

cve.numberOfReferences[le]

array of numbers

Filter cve.numberOfReferences to be lower than or equal to the provided value.

cve.numberOfReferences[le]

cve.numberOfThreatActors

array of numbers

Filter cve.numberOfThreatActors to be equal to the provided value.

cve.numberOfThreatActors

cve.numberOfThreatActors[ne]

array of numbers

Filter cve.numberOfThreatActors to be not equal to the provided value.

cve.numberOfThreatActors[ne]

cve.numberOfThreatActors[eq]

array of numbers

Filter cve.numberOfThreatActors to be equal to the provided value.

cve.numberOfThreatActors[eq]

cve.numberOfThreatActors[ge]

array of numbers

Filter cve.numberOfThreatActors to be greater than or equal to the provided value.

cve.numberOfThreatActors[ge]

cve.numberOfThreatActors[lt]

array of numbers

Filter cve.numberOfThreatActors to be lower than the provided value.

cve.numberOfThreatActors[lt]

cve.numberOfThreatActors[gt]

array of numbers

Filter cve.numberOfThreatActors to be greater than the provided value.

cve.numberOfThreatActors[gt]

cve.numberOfThreatActors[le]

array of numbers

Filter cve.numberOfThreatActors to be lower than or equal to the provided value.

cve.numberOfThreatActors[le]

cve.threatActors[overlap]

array of arrays of strings

Filter cve.threatActors to contain the provided values.

cve.threatActors[overlap]

device.industry

array of objects

Filter device.industry to be equal to the provided value.

device.industry

device.industry[eq]

array of strings

Filter device.industry to be equal to the provided value.

device.industry[eq]

device.industry[ne]

array of strings

Filter device.industry to be not equal to the provided value.

device.industry[ne]

device.group

array of objects

Filter device.group to be equal to the provided value.

device.group

device.group[eq]

array of strings

Filter device.group to be equal to the provided value.

device.group[eq]

device.group[ne]

array of strings

Filter device.group to be not equal to the provided value.

device.group[ne]

device.category

array of objects

Filter device.category to be equal to the provided value.

device.category

device.category[eq]

array of strings

Filter device.category to be equal to the provided value.

device.category[eq]

device.category[ne]

array of strings

Filter device.category to be not equal to the provided value.

device.category[ne]

device.type

array of objects

Filter device.type to be equal to the provided value.

device.type

device.type[eq]

array of strings

Filter device.type to be equal to the provided value.

device.type[eq]

device.type[ne]

array of strings

Filter device.type to be not equal to the provided value.

device.type[ne]

device.brand

array of strings

Filter device.brand to be equal to the provided value.

device.brand

device.brand[ne]

array of strings

Filter device.brand to be not equal to the provided value.

device.brand[ne]

device.brand[eq]

array of strings

Filter device.brand to be equal to the provided value.

device.brand[eq]

device.brand[like]

array of strings

Filter device.brand with a wildcard (%) to match the provided value.

device.brand[like]

device.brand[nlike]

array of strings

Filter device.brand with a wildcard (%) to not match the provided value.

device.brand[nlike]

device.model

array of strings

Filter device.model to be equal to the provided value.

device.model

device.model[ne]

array of strings

Filter device.model to be not equal to the provided value.

device.model[ne]

device.model[eq]

array of strings

Filter device.model to be equal to the provided value.

device.model[eq]

device.model[like]

array of strings

Filter device.model with a wildcard (%) to match the provided value.

device.model[like]

device.model[nlike]

array of strings

Filter device.model with a wildcard (%) to not match the provided value.

device.model[nlike]

device.osName

array of strings

Filter device.osName to be equal to the provided value.

device.osName

device.osName[ne]

array of strings

Filter device.osName to be not equal to the provided value.

device.osName[ne]

device.osName[eq]

array of strings

Filter device.osName to be equal to the provided value.

device.osName[eq]

device.osName[like]

array of strings

Filter device.osName with a wildcard (%) to match the provided value.

device.osName[like]

device.osName[nlike]

array of strings

Filter device.osName with a wildcard (%) to not match the provided value.

device.osName[nlike]

device.osVersion

array of strings

Filter device.osVersion to be equal to the provided value.

device.osVersion

device.osVersion[ne]

array of strings

Filter device.osVersion to be not equal to the provided value.

device.osVersion[ne]

device.osVersion[eq]

array of strings

Filter device.osVersion to be equal to the provided value.

device.osVersion[eq]

device.osVersion[like]

array of strings

Filter device.osVersion with a wildcard (%) to match the provided value.

device.osVersion[like]

device.osVersion[nlike]

array of strings

Filter device.osVersion with a wildcard (%) to not match the provided value.

device.osVersion[nlike]

device.osTitle

array of strings

Filter device.osTitle to be equal to the provided value.

device.osTitle

device.osTitle[ne]

array of strings

Filter device.osTitle to be not equal to the provided value.

device.osTitle[ne]

device.osTitle[eq]

array of strings

Filter device.osTitle to be equal to the provided value.

device.osTitle[eq]

device.osTitle[like]

array of strings

Filter device.osTitle with a wildcard (%) to match the provided value.

device.osTitle[like]

device.osTitle[nlike]

array of strings

Filter device.osTitle with a wildcard (%) to not match the provided value.

device.osTitle[nlike]

Responses

200OK

400Schema Error