: Get Anti-spyware, Vulnerability, and File-Format Signature
Focus
Focus

Get Anti-spyware, Vulnerability, and File-Format Signature

Table of Contents

Get Anti-spyware, Vulnerability, and File-Format Signature

Use this resource to get anti-spyware, vulnerability, and file-format signature info based on the specified signature ID.

Resource

https://autofocus.paloaltonetworks.com/api/intel/v1/threatvault/ips/signature/{signature_id}

Request Parameters

The following table describes the parameters used with this endpoint.
Parameters
Description
Type
Example or Possible Values
apiKey
(Required) API key tied to your license. All users attached to a license share a single API key.
string
Example (obfuscated):
d32108a5-XXX-XXXX-XXXX-c04bda5b8450
{signature_id}
(Required) The identification number of an anti-spyware, vulnerability, or file-format signature.
string
The threat ID range for anti-spyware, vulnerability, and file-format signatures.
  • Anti-spyware Signatures
    • Threat ID Range: 80001-89999
    • Custom threat ID Range: 15000-18000
    • Additional threat ID range used for custom signatures; added in PAN-OS 10.0: 6900001-7000000
  • Vulnerability Signatures
    • Threat ID Range: 90000-99999
    • Custom threat ID Range: 41000-45000
    • Additional threat ID range used for custom signatures; added in PAN-OS 10.0: 6800001 -6900000
  • File-Format Signatures
Example:
56285

JSON Sample

Request

Include the API key and vulnerability signature ID number in the resource URL.
curl -X GET "https://autofocus.paloaltonetworks.com/api/intel/v1/threatvault/ips/signature/56285?api_key=apiKey" -H "accept: application/json"

Response

The response contains details about the vulnerability signature.
{ "signatureName": "Microsoft Graphics Component Information Disclosure Vulnerability", "signatureId": 56285, "signatureType": "vulnerability", "cve": "CVE 2019-1153", "vendor": "", "firstReleaseVersion": 8183, "firstReleaseTime": "2019-08-17 UTC", "latestReleaseVersion": 8183, "latestReleaseTime": "2019-08-17 UTC", "status": "released", "metadata": "\"severity\":\"medium\",\"reference\":\"avd\"" }