QueryThreatReportsMatchingIOCs

post

https://app.stairwell.com/v1/environments/{environment}/threatReports:queryMatchingIOCs

Query threat reports matching IOCs. Takes a set of IOCs (hashes,
hostnames, IPs, YARA rules) and returns which threat reports reference
them, along with metadata about those reports.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

environment

string

required

The environment to search for matching threat reports.

Body Params

Request message for QueryThreatReportsMatchingIOCs RPC.

iocs

array of objects

required

IOCs to look up. May contain mixed types. Maximum: 100 per request.

iocs*

pageSize

int32

Pages the lookup. A positive value returns at most that many (IOC,
report) matches per page (capped by the server) and a next_page_token
while more follow. A negative value is an error. Unset or zero returns
every match in one response with an empty next_page_token. That is a
backward-compatibility tradeoff, not a design choice: callers predating
pagination send no page size and expect the whole result, so paging is
opt-in. The next version of the API should require a page size and
return a token instead.

pageToken

string

Page token from a previous QueryThreatReportsMatchingIOCs call with the
same IOCs and parent.

Response

200OK