🚧
Public Preview
Threat Profile module is provided as a public preview and is subject to change. Use with caution.

This endpoint is the same as /threat_profiles/{profile_id}/recommendations except it returns just the list of objects descriptors instead of returning complete objects with their attributes.

Examples

Get 10 objects descriptors associated to the Threat Profile 332e02da667746f180a9740e94a3ec98.

import requests

profile_id = "332e02da667746f180a9740e94a3ec98"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?limit=10"
headers = {"accept": "application/json","x-apikey": <api-key>}

response = requests.get(url, headers=headers)

Get only descriptors of automatically generated recommendations of the Threat Profile 332e02da667746f180a9740e94a3ec98.

import requests

profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "recommendation_source:SOURCE_RECOMMENDATION"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}

response = requests.get(url, headers=headers)

Get only objects descriptors added by users to the Threat Profile 332e02da667746f180a9740e94a3ec98.

import requests

profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "recommendation_source:SOURCE_DIRECT_FOLLOW"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}

response = requests.get(url, headers=headers)

Get only malware fammilies descriptors associated to the Threat Profile 332e02da667746f180a9740e94a3ec98.

import requests

profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "collection_type:malware-family"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}

response = requests.get(url, headers=headers)

Get only automatically generated recommendations descriptors of threat actors of the Threat Profile 332e02da667746f180a9740e94a3ec98.

import requests

profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "recommendation_source:SOURCE_RECOMMENDATION AND collection_type:threat-actor"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}

response = requests.get(url, headers=headers)

Get only vulnerabilities and campaingn descriptors associated to the Threat Profile 332e02da667746f180a9740e94a3ec98.

import requests

profile_id = "332e02da667746f180a9740e94a3ec98"
filter = "collection_type:report OR collection_type:vulnerability"
url = f"https://www.virustotal.com/api/v3/threat_profiles/{profile_id}/relationships/recommendations?filter={filter}"
headers = {"accept": "application/json","x-apikey": <api-key>}

response = requests.get(url, headers=headers)

200200

400400