Sandbox analyses feed

The behavior feed is a continuous real-time stream of JSON-encoded structures that contains information about each sandbox or behaviour report for files uploaded to the service. Those JSON-encoded structures are put together in batches, with a new batch generated every minute. The batch consists of a text file containing one JSON object per line.

🚧

Special privileges required

Sandbox analyses feeds endpoints are only available to users with a Sandbox feeds license. Contact us for more information.