🚧
Special privileges required
Threat Actors, Campaigns, Country Profiles and Industry Profiles are only available to users with the Google Threat Intelligence (Google TI) Enterprise or Enterprise Plus licenses.

Returns a list of Comments objects from a Threat Actor, Campaign, Malware Family, Software or Toolkit, IoC Collection, Country Profile or an Industry Profile.

Examples

Get 3 community comments from a threat actor.

import requests

object_id = "threat-actor--bcaaad6f-0597-4b89-b69b-84a6be2b7bc3"
limit = 3
url = f"https://www.virustotal.com/api/v3/collections/{object_id}/comments?limit={limit}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)

Get 3 community comments from a malware or toolkit.

import requests

object_id = "malware--350aa703-7750-5e07-997b-476375955828"
limit = 3
url = f"https://www.virustotal.com/api/v3/collections/{object_id}/comments?limit={limit}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)

Get 3 community comments from a campaign.

import requests

object_id = "campaign--24f96f40-b2fa-512c-b1da-2f22a949d12d"
limit = 3
url = f"https://www.virustotal.com/api/v3/collections/{object_id}/comments?limit={limit}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)

Get 3 community comments from a IoC collection.

import requests

object_id = "alienvault_64edfc5ab93abb1407070292"
limit = 3
url = f"https://www.virustotal.com/api/v3/collections/{object_id}/comments?limit={limit}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)

Get 3 community comments from a Country Profile.

import requests

object_id = "country-profile--canada"
limit = 3
url = f"https://www.virustotal.com/api/v3/collections/{object_id}/comments?limit={limit}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)