{ "opencollection": "1.0.0", "info": { "name": "VirusTotal API v3 - Access Control Access Control - Group Management IoC Investigation - Comments API", "version": "3.0" }, "request": { "auth": { "type": "apikey", "key": "x-apikey", "value": "{{x-apikey}}", "placement": "header" } }, "items": [ { "info": { "name": "IoC Investigation - Comments", "type": "folder" }, "items": [ { "info": { "name": "VirusTotal Get Latest Comments", "type": "http" }, "http": { "method": "GET", "url": "https://www.virustotal.com/api/v3/comments", "params": [ { "name": "limit", "value": "", "type": "query", "description": "Number of items to retrieve" }, { "name": "filter", "value": "", "type": "query", "description": "Filter returned elements" }, { "name": "cursor", "value": "", "type": "query", "description": "Continuation cursor" } ], "auth": { "type": "apikey", "key": "x-apikey", "value": "{{x-apikey}}", "placement": "header" } }, "docs": "This endpoint retrieves information about the latest comments added to Google Threat Intelligence. \nYou can do some filtering over those comments, and get only those that contains a certain tag inside (e.g. filter=tag:malware).\n\n```json Response example\n{\n \"meta\": {\n \"cursor\": \"Cs8BChEKBGRhdGUSCQiCnsTiupvwAhK1AWoRc352aXJ1c3RvdGFsY2xvdWRynwELEgNVUkwiQDAxMTkxNTk0MmRiNTU2YmJhYjUxMzdmNzYxZWZlNjFmZWQyYjAwNTk4ZmVhOTAwMzYwYjgwMGIxOTNhN2JmMzEMCxIHQ29tbWVudCJJMDExOTE1OTQyZGI1NTZiYmFiNTEzN2Y3NjFlZmU2" }, { "info": { "name": "VirusTotal Get a Comment Object", "type": "http" }, "http": { "method": "GET", "url": "https://www.virustotal.com/api/v3/comments/:id", "params": [ { "name": "relationships", "value": "", "type": "query", "description": "Relationship name (see [table](ref:comment-object#relationships))" }, { "name": "id", "value": "", "type": "path", "description": "Comment ID" } ], "auth": { "type": "apikey", "key": "x-apikey", "value": "{{x-apikey}}", "placement": "header" } }, "docs": "VirusTotal Get a Comment Object" }, { "info": { "name": "VirusTotal Delete a Comment", "type": "http" }, "http": { "method": "DELETE", "url": "https://www.virustotal.com/api/v3/comments/:id", "params": [ { "name": "id", "value": "", "type": "path", "description": "Comment ID" } ], "auth": { "type": "apikey", "key": "x-apikey", "value": "{{x-apikey}}", "placement": "header" } }, "docs": "VirusTotal Delete a Comment" }, { "info": { "name": "VirusTotal Get Object Descriptors Related to a Comment", "type": "http" }, "http": { "method": "GET", "url": "https://www.virustotal.com/api/v3/comments/:id/relationships/:relationship", "params": [ { "name": "id", "value": "", "type": "path", "description": "Comment identifier" }, { "name": "relationship", "value": "", "type": "path", "description": "Relationship name (see [table](ref:comment-object#relationships))" }, { "name": "limit", "value": "", "type": "query", "description": "Maximum number of related objects to retrieve" }, { "name": "cursor", "value": "", "type": "query", "description": "Continuation cursor" } ], "auth": { "type": "apikey", "key": "x-apikey", "value": "{{x-apikey}}", "placement": "header" } }, "docs": "This endpoint is the same as [/comments/{id}/{relationship}](https://gtidocs.virustotal.com/reference/comments-relationships) except it returns just the related object's IDs (and context attributes, if any) instead of returning all attributes.\n" }, { "info": { "name": "VirusTotal Add a Vote to a Comment", "type": "http" }, "http": { "method": "POST", "url": "https://www.virustotal.com/api/v3/comments/:id/vote", "params": [ { "name": "id", "value": "", "type": "path", "description": "Comment ID" } ], "body": { "type": "json", "data": "{}" }, "auth": { "type": "apikey", "key": "x-apikey", "value": "{{x-apikey}}", "placement": "header" } }, "docs": "```json Example response\n{\n \"data\": {\n \"abuse\": 0,\n \"negative\": 0,\n \"positive\": 1\n }\n}\n```\n" }, { "info": { "name": "VirusTotal Get Objects Related to a Comment", "type": "http" }, "http": { "method": "GET", "url": "https://www.virustotal.com/api/v3/comments/:id/:relationship", "params": [ { "name": "id", "value": "", "type": "path", "description": "Comment identifier" }, { "name": "relationship", "value": "", "type": "path", "description": "Relationship name (see [table](ref:comment-object#relationships))" } ], "auth": { "type": "apikey", "key": "x-apikey", "value": "{{x-apikey}}", "placement": "header" } }, "docs": "Comment objects are related to other objects in the Google Threat Intelligence dataset. As mentioned in the [Relationships](https://gtidocs.virustotal.com/reference/relationships) section, those related objects can be retrieved by sending `GET` requests to the relationships endpoint.\n\nAll available relationships are documented in the [Comment](https://gtidocs.virustotal.com/reference/comment-object) API object page.\n" } ] } ], "bundled": true }