Search IoCs inside a vulnerability

Allows to search IoCs inside a vulnerability using advanced intelligence queries.

The expected input is the same as /intelligence/search. By default it searches files, in order to search other entities use entity:domain/ip/url.

Examples

Search for IoCs related to a vulnerability that meet certain conditions.

import requests
import urllib

object_id = "vulnerability--cve-2022-30190"
query = "tag%3Acve-2022-30190"
attributes = "name
limit = "2"
relationships = "files"
url = f"https://www.virustotal.com/api/v3/collections/{object_id}/search?query={query}&limit={limit}&attributes={attributes}&relationships={relationships}"
headers = {"accept": "application/json","x-apikey": <api-key>}
response = requests.get(url, headers=headers)
Path Params
string
required

Vulnerability's ID

Query Params
string
required

Intelligence query

int32
0 to 40
Defaults to 10

Maximum number of IoCs to retrieve (max 40)

string

Continuation cursor

string

Sorting order

string

Comma-separated attributes to return from the resulting IoCs

string

Comma-separated name of relationships descriptors to return from the IoCs

Headers
string
required

Your API key

string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Response

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
text/plain