Get Inspected File Details

Get Inspected File Details

Get details of a particular inspected file including number of inspections and workloads_affected count for the specified time window. Atleast one of sha256, sha1 or md5 file hash is a required paramater. Query parameter verdict is optional and if passed, last observed inspection_time is identified based on matching events by verdict. Note that counts for the file are aggregated independent of verdict parameter passed here and correspond to all events observed for this file.

Request
URI
GET
https://api.example.com/napp/api/v1/malware-prevention/inspected-files/details
COPY
Query Parameters
integer
start_time
Required

Use this request param for specifiying starting time of a timeline. Value has to be specified in milliseconds since epoch.

integer
end_time
Required

Use this request param for specifiying ending time of a timeline. Value has to be specified in milliseconds since epoch.

string of array
sha256
Optional

Use this request param for specifying sha256 hash to filter. If this parameter is passed multiple times, OR condition will be assumed.

string of array
sha1
Optional

Use this request param for specifying sha1 hash to filter. If this parameter is passed multiple times, OR condition will be assumed.

string of array
md5
Optional

Use this request param for specifying md5 hash to filter. If this parameter is passed multiple times, OR condition will be assumed.

string of array
verdict
Optional

Use this request param for specifying verdict to filter. If this parameter is passed multiple times, OR condition will be assumed.


Authentication
This operation uses the following authentication methods.
Responses
200

Successful Operation

Returns InspectedFileDetailsListResult of type(s) application/json
This response body class contains all of the following: ListResult , InlineInspectedFileDetailsListResult1
{
    "_self": {},
    "_links": [
        {
            "href": "string",
            "action": "string",
            "rel": "string"
        }
    ],
    "_schema": "string",
    "result_count": 0,
    "sort_by": "string",
    "sort_ascending": false,
    "cursor": "string",
    "results": [
        {
            "sha256": "string",
            "sha1": "string",
            "md5": "string",
            "file_size": 0,
            "last_inspected": 0,
            "inspection_status": "string",
            "threat_score": 0,
            "verdict": "string",
            "error_message": "string",
            "error_code": "string",
            "allow_listed": {
                "last_inspection_setting": false,
                "current_setting": false
            },
            "malware_family": [
                "string"
            ],
            "malware_class": [
                "string"
            ],
            "is_blocked": false,
            "file_type": "string",
            "inspections_count": 0,
            "file_name": [
                "string"
            ],
            "analysed_in_cloud": false,
            "file_type_details": "string",
            "submitted_by": "string",
            "analyst_task_uuid": "string",
            "protocol": "string",
            "workloads_affected_count": 0,
            "last_client": {
                "vm_id": "string",
                "ip_address": "string",
                "fqdn": "string"
            },
            "last_server": {
                "vm_id": "string",
                "ip_address": "string",
                "fqdn": "string"
            },
            "transport_node_type": "string",
            "transport_node_id": "string",
            "first_inspected": 0
        }
    ]
}