Resources for Initiating Searches

The following table describes resources available for initiating searches.

Resources for Initiating Searches	Format	Description	Point Cost
https://autofocus.paloaltonetworks.com/api/intel/v1/threatvault/dns/search	JSON	Search signatures in which the signature / threat name meets the match condition you defined in the search query.	2
https://autofocus.paloaltonetworks.com/api/intel/v1/threatvault/ips/search
https://autofocus.paloaltonetworks.com/api/intel/v1/threatvault/panav/search
/samples/search/	JSON	Search samples in which samples meet the match condition you defined.	10
/stix/samples/search/	STIX		10
/sessions/search/	JSON	Search for sessions in which samples meet the match conditions you defined.	10
/stix/sessions/search/	STIX		10
/sessions/histogram/search/	JSON	Search sessions for histogramdata. The results of this search correspond to the Malware Download Sessions data when you view search statistics.	10
/sessions/aggregate/search/	JSON	Initiate a session search for aggregatedata. The results of this search correspond to the aggregate data shown when you view search statistics such as Top Firewalls, Top Malware , Source Countries , and Destination Countries .	10
/top-tags/search/	JSON	Initiate a search for the most popular tags, also known as top tags. The results of this search correspond to the Top Tags data available when you view search statistics.	10

Document:AutoFocus™ API References