This endpoint is the same as /threat_profiles/{profile_id}/recommendations except it returns just the list of objects descriptors instead of returning complete objects with their attributes.
Examples
Get 10 objects descriptors associated to the Threat Profile 332e02da667746f180a9740e94a3ec98.
import requests
profile_id = "332e02da667746f180a9740e94a3ec98"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?limit=10"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)Get only descriptors of automatically generated recommendations of the Threat Profile 332e02da667746f180a9740e94a3ec98.
import requests
profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "recommendation_source:SOURCE_RECOMMENDATION"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)Get only objects descriptors added by users to the Threat Profile 332e02da667746f180a9740e94a3ec98.
import requests
profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "recommendation_source:SOURCE_DIRECT_FOLLOW"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)Get only objects descriptors observed by your connector to the Threat Profile 332e02da667746f180a9740e94a3ec98.
import requests
profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "recommendation_source:SOURCE_OBSERVED"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)Get only malware fammilies descriptors associated to the Threat Profile 332e02da667746f180a9740e94a3ec98.
import requests
profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "collection_type:malware-family"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)Get only automatically generated recommendations descriptors of threat actors of the Threat Profile 332e02da667746f180a9740e94a3ec98.
import requests
profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "recommendation_source:SOURCE_RECOMMENDATION AND collection_type:threat-actor"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)Get only vulnerabilities and campaign descriptors associated to the Threat Profile 332e02da667746f180a9740e94a3ec98.
import requests
profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "collection_type:report OR collection_type:vulnerability"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)