alienvault.com API: get_indicator_details
alienvault.com via Parse · developer_tools
Retrieve detailed threat intelligence for a specific indicator (IP, domain, URL, file hash, CVE). Returns reputation data, geolocation, associated pulses, validation status, and section-specific details. The 'general' section includes all core fields; other sections provide specialized views. Not all section/type combinations are available upstream. The AlienVault OTX API provides access to global threat intelligence, including indicators of compromise (IOCs), threat pulses, and adversary profiles. Data is sourced from the Open Threat Exchange community. Fulfilled by Parse from alienvault.com.
- alienvault-com
- b2b-directory
- developer-tools
- government-public
- parse
- platform-key
Price and execution
- Price
- $0.02 USD credits / call
- Trust tier
- Verified
- Execution
- Managed call
- Capability group
- developer_tools
Interface snapshot
- Protocol
- HTTP operation
- Operation
- GET /scraper/9d8a168a-f773-44d8-8ecb-0d09fbcbcd89/get_indicator_details
- Interface artifact
- sha256:73f560e3aee047bb0112b5f6557ed229bd6bb08e85be367f503af9316c5d07de
- Manifest digest
- sha256:de140d077b3a2d1af1bf94fc336dfc2308c7f243a1b547e31e5dd6195503ecee
Request fields
- type (string, required): Indicator type.: Allowed values: IPv4, IPv6, domain, hostname, url, file, cve
- value (string, required): Indicator value (e.g. '8.8.8.8' for IPv4, 'example.com' for domain, 'CVE-2021-44228' for cve).
- section (string): Data section to retrieve.: Allowed values: general, geo, reputation, url_list, passive_dns, malware, analysis
Example queries
- {"type":"IPv4","value":"8.8.8.8","section":"general"}