๐Ÿ”€ collections

The collections relationship returns a list of collections for a given user.

This relationship can be retrieved by using the relationships API endpoint and returns a list containing collection objects.

This relationship accepts both order and filter arguments:

Possible orders (ending on + or -):

  • last_modification_date
  • subscribers_count
  • creation_date

Possible filter modifiers:

  • name

For example, if we want Joe's collections sorted by most recently created first and containing 'emotet' in the collection's name we will do the following request:
https://www.virustotal.com/api/v3/users/Joe/collections?order=creation_date-&filter=name:emotet.

{
  "data": [
    <COLLECTION_OBJECT>
    ...
  ],
  "links": {
    "next": <string>,
    "self": <string>
  },
  "meta": {
    "count": <int>,
    "cursor": <string>
  }
}
{
  "meta": {
    "count": 2,
    "cursor": "CocBChoKDWNyZWF0aW9uX2RhdGUSCQjmsteuveDyAhJlahFzfnZpcnVzdG90YWxjbG91ZHJQCxIKQ29sbGVjdGlvbiJAZGUyZGM5MmU5ZThkYTQ3OWVmY2JkZjczMTBhMWI1ZTY3ODgxYmYxMGRjOTFmNmU1ZjcxNTlhNTJjMjlhODEyZQwYACAB"
  },
  "data": [
    {
      "attributes": {
        "description": "Test collection",
        "name": "Prevx infected",
        "tags": [],
        "ip_addresses_count": 0,
        "targeted_industries": [],
        "domains_count": 0,
        "creation_date": 1630592216,
        "references_count": 0,
        "alt_names": [],
        "urls_count": 0,
        "autogenerated_tags": [
          "bobsoft",
          "pecompact",
          "themida",
          "rlpack",
          "yoda",
          "mew",
          "aspack",
          "nspack",
          "attachment",
          "pespin",
          "molebox",
          "telock",
          "yodaprot",
          "ahpack",
          "armadillo",
          "execryptor",
          "upack",
          "asprotect",
          "xorcrypt",
          "fsg",
          "ntkrnl",
          "upx"
        ],
        "last_modification_date": 1630592216,
        "top_icon_md5": [
          "4e36c557b0188de9290a9ff9685cce17",
          "5fff7c360c84b7ad1554b722598fb43c",
          "44abfa8c8002712b3ed19f8f2847dd0d"
        ],
        "targeted_countries": [],
        "files_count": 1234
      },
      "type": "collection",
      "id": "de2dc92e9e8da479efcbdf7310a1b5e67881bf10dc91f6e5f7159a52c29a812e",
      "links": {
        "self": "https://www.virustotal.com/api/v3/collections/de2dc92e9e8da479efcbdf7310a1b5e67881bf10dc91f6e5f7159a52c29a812e"
      }
    }
  ],
  "links": {
    "self": "https://www.virustotal.com/api/v3/users/roadrunner/collections?filter=name%3Ainfected&limit=1&order=creation_date-",
    "next": "https://www.virustotal.com/api/v3/users/roadrunner/collections?filter=name%3Ainfected&cursor=CocBChoKDWNyZWF0aW9uX2RhdGUSCQjmsteuveDyAhJlahFzfnZpcnVzdG90YWxjbG91ZHJQCxIKQ29sbGVjdGlvbiJAZGUyZGM5MmU5ZThkYTQ3OWVmY2JkZjczMTBhMWI1ZTY3ODgxYmYxMGRjOTFmNmU1ZjcxNTlhNTJjMjlhODEyZQwYACAB&limit=1&order=creation_date-"
  }
}