Lists Alerts Notifications

get

https://www.virustotal.com/api/v3/alerts/notifications

Query Params

severity

string

If present, only return notifications with a severity greater or equal to this value. Severities are: low, medium, high, critical

asset_id

int32

If present, filter only notifications from this asset watchlist.

entity_type

string

If present, filter only notifications for this entity type. One of: DOMAIN, URL, IP, FILE

last_n_hours

int32

If present, retrieve only notifications N hours old, or younger.

detection_category

string

If present, only return notifications with this detection category. Categories are BRAND_MATCH, DETECTED_DOMAIN, DETECTED_IP, DETECTED_URL, DOMAIN_TYPOSQUATTING, FAVICON_REUSE, FILE_COMMUNICATING_WITH_DOMAIN, FILE_COMMUNICATING_WITH_IP, FILE_COMMUNICATING_WITH_URL, FILE_DOWNLOADED_FROM_DOMAIN, FILE_DOWNLOADED_FROM_IP, FILE_DOWNLOADED_FROM_URL, PATTERN_EMBEDDED_IN_FILE, SUBDOMAIN_ABUSE.

use_case_category

string

If present, only return notifications with this use case category. Categories are BRAND_IMPERSONATION, CORPORATE_INFRASTRUCTURE_ABUSE, PHISHING_COUNTERFEITING, POTENTIAL_FALSE_POSITIVE.

message_contains

string

If present, will search and match inside the event_message_json field of the Notification

cursor

string

Continuation cursor

Headers

x-apikey

string

Your API key

Language

Loading…

Response

Click Try It! to start a request and see the response here!