Focus

AutoFocus® API Reference

Resources for Initiating Searches

Table of Contents

Resources for Initiating Searches

The following table describes resources available for initiating searches.

Resources for Initiating Searches	Format	Description	Point Cost
https://autofocus.paloaltonetworks.com/api/intel/v1/threatvault/dns/search	JSON	Search signatures in which the signature / threat name meets the match condition you defined in the search query.	2
https://autofocus.paloaltonetworks.com/api/intel/v1/threatvault/ips/search
https://autofocus.paloaltonetworks.com/api/intel/v1/threatvault/panav/search
/samples/search/	JSON	Search samples in which samples meet the match condition you defined.	10
/stix/samples/search/	STIX		10
/sessions/search/	JSON	Search for sessions in which samples meet the match conditions you defined.	10
/stix/sessions/search/	STIX		10
/sessions/histogram/search/	JSON	Search sessions for histogramdata. The results of this search correspond to the Malware Download Sessions data when you view search statistics.	10
/sessions/aggregate/search/	JSON	Initiate a session search for aggregatedata. The results of this search correspond to the aggregate data shown when you view search statistics such as Top Firewalls, Top Malware, Source Countries, and Destination Countries.	10
/top-tags/search/	JSON	Initiate a search for the most popular tags, also known as top tags. The results of this search correspond to the Top Tags data available when you view search statistics.	10

AutoFocus API Resources

Resources for Viewing Search Results