Get Session Details
Table of Contents
Expand all | Collapse all
-
- Get Session Details
- Get Sample Analysis
- Get Tags
- Get Tag Details
- Get Threat Indicator Feed
- Get Custom Threat Indicator Feed
- Get Threat Intelligence Card Summary
- Export List
- Get Anti-spyware, Vulnerability, and File-Format Signature
- Get Antivirus Signature
- Get DNS Signature
- Get Geolocation
- Get Anti-spyware, Vulnerability, and File-Format Release Info
Get Session Details
Use this resource to get details about a specific session,
such as application, filename, source country, and device model.
Include a session ID parameter (_id) in the
URL to indicate the session you want to look at. The session ID
is shown when you Search
Samples and Sessions.
Resource
/session/{session_id}
Request Parameters
The following table describes request parameters
for Get Session requests.
Parameters | Description | Type | Example or Possible
Values |
|---|---|---|---|
| _id | (Required) Session ID of the session. | string | Example: 11935370063 |
Sample Request
Provide the session ID in the request URL:
curl -X POST -H "Content-Type: application/json" -d '{ "apiKey": "apikey"}' 'https://autofocus.paloaltonetworks.com/api/v1.0/session/11935370063'
Sample Response
The response includes details about the corresponding
session:
{ "af_message": "complete", "af_in_progress": false, "af_responses": 2, "took": 76, "af_first_result_af_took": 80, "af_cookie": "0-5a7b19b4-6854-4af3-9cd5-f33ac7ffca6d", "hits": [ { "_id": "11935370063", "_source": { "app": "smtp", "emailsender": "Vhg1lzi@yfmcioVeGVOzyJcblirexNMAjbSb.net", "device_country": "United States", "sha256": "ae433a1049d4647f6ea6e4ce6ae36717247ebb03edb07869af95c47805250480", "dst_port": "25", "device_serial": "007200002578", "dst_ip": "10.154.10.47", "fileurl": "unknown", "device_industry": "High Tech", "tstamp": "2015-09-08T12:04:47", "src_port": "44859", "device_hostname": "jp4demo.example.com", "emailsubject": "7ijZR3aHLzkZPgN6qIpunZkCbRiuj4WjSmBmnPlHU4P4z26uvQContent-Type: multipart/mixed; boundary=\"_742895308300408871816834\"--_742895308300408871816834Content-Type: text/plainContent-Disposition: 7bitruo5Umuazuyj4KhfnjJPe44nP2--_742895308300408871816834Conte", "filename": "VRzOAZufmnnuEkd.Exe", "src_country": "United States", "src_ip": "66.1.1.10", "user_id": "unknown", "emailrecipient": "sBgeGaIFSp1WksQV2P@yIZGAEwV.edu", "device_countrycode": "US", "src_countrycode": "US", "vsys": 1, "region": "us" } } ], "af_first_result_es_took": 76, "af_first_result_es_hits": 1, "af_indices": 2, "af_complete_percentage": 100, "bucket_info": { "minute_points": 200, "daily_points": 100000, "minute_points_remaining": 198, "daily_points_remaining": 99176, "minute_bucket_start": "2016-10-10 17:58:36", "daily_bucket_start": "2016-10-10 03:27:03" } }