Get a list of observables.

get

https://cti.example.com/api/v2/observables

Required permissions

read extracts

Query Params

limit

int32

≥ 1

Maximum number of items to be returned

offset

int32

≥ 0

Return results starting from the specified (zero-based) index

sort

string

Comma-separated list of fields to sort on. Prefix a field with the minus "-" sign if you intend to apply descending sorting to it

data

boolean

Set this parameter to false if you want to only retrieve the number of objects matching the query

attributes

string

Comma-separated list of attributes to be returned. Nested attributes are separated by dots - e.g. data.title

filter[type]

string

Filter by observable type

filter[value]

string

Filter by observable value

filter[sources]

string

Filter by source ID/URL

filter[entities]

string

Filter by related entity ID/URL

filter[_lucene_search]

string

Full-text or faceted search with logic operators like AND and OR. The value examples follow.

This filter is incompatible with any other filter type.

The language of the search queries is Lucene and the capability is the same as the one in Intelligence Center UI. Read more in its documentation.

Responses

Language

Credentials

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200The requested object(s)

400Invalid request

401Unauthorized request

403Missing permissions