{
  "opencollection": "1.0.0",
  "info": {
    "name": "VirusTotal API v3 - Access Control Access Control - Group Management Threat Graphs API",
    "version": "3.0"
  },
  "request": {
    "auth": {
      "type": "apikey",
      "key": "x-apikey",
      "value": "{{x-apikey}}",
      "placement": "header"
    }
  },
  "items": [
    {
      "info": {
        "name": "Threat Graphs",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "VirusTotal Search Graphs",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/graphs",
            "params": [
              {
                "name": "filter",
                "value": "",
                "type": "query",
                "description": "Return the graphs matching the given criteria only"
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Maximum number graphs to retrieve"
              },
              {
                "name": "cursor",
                "value": "",
                "type": "query",
                "description": "Continuation cursor"
              },
              {
                "name": "order",
                "value": "",
                "type": "query",
                "description": "Sort order"
              },
              {
                "name": "attributes",
                "value": "",
                "type": "query",
                "description": "Specific fields to retrieve"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Endpoint used to search graphs.\n\nThere are a set of multiple modifiers that you can use to refine your search results. You can combine all of them together and use them in conjunction with AND, OR and NOT operators.\n\nDate and numeric fields support the suffix plus or minus to match values greater or less than the passed value. If not sign has been added to the modifier, you will get exact matches. You can use more than once the same modifier in the same query to define ranges: `creation_date:201"
        },
        {
          "info": {
            "name": "VirusTotal Create a Graph",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://www.virustotal.com/api/v3/graphs",
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "This endpoint can be used to create new graphs. Note that private graphs will increment the usage of the private graphs quota in your Google Threat Intelligence plan. \n\n```json Request example\n{\n  \"data\": {\n    \"attributes\": {\n      \"comments_count\": 0,\n      \"creation_date\": 1599060646,\n      \"graph_data\": {\n        \"description\": \"test\",\n        \"version\": \"5.0.0\"\n      },\n      \"last_modified_date\": 1599117623,\n      \"links\": [\n        {\n          \"connection_type\": \"last_serving_ip_address\","
        },
        {
          "info": {
            "name": "VirusTotal Get a Graph Object",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/graphs/:id",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "A 65 char length id which uniquely identify the graph."
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Returns a [Graph](https://gtidocs.virustotal.com/reference/graph-object) object.\n\n```json Response example\n{\n  \"data\": {\n    \"attributes\": {\n      \"graph_data\": {\n        \"description\": \"Hooli.com investigation\"\n      },\n      \"links\": [\n        {\n          \"connection_type\": \"resolutions\",\n          \"source\": \"www.hooli.com\",\n          \"target\": \"relationships_resolutions_wwwhoolicom\"\n        },\n        {\n          \"connection_type\": \"resolutions\",\n          \"source\": \"relationships_resolutions"
        },
        {
          "info": {
            "name": "VirusTotal Update a Graph Object",
            "type": "http"
          },
          "http": {
            "method": "PATCH",
            "url": "https://www.virustotal.com/api/v3/graphs/:id",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "A 65 char length id which uniquely identify the graph."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "```json Update request example\n{\n  \"data\":{\n    \"attributes\": {\n      \"private\": true\n    },\n    \"type\":\"graph\"\n  }\n}\n```\n\n```json Response example\n{\n  \"data\": {\n    \"attributes\": {\n      \"private\": false,\n      \"nodes\": [\n        {\n          \"type\":\"domain\",\n          \"entity_id\":\"www.hooli.com\",\n          \"x\":-18,\n          \"y\":65,\n          \"text\":\"Root Node\",\n          \"index\":0\n        },\n        {\n          \"type\":\"relationship\",\n          \"entity_id\":\"relationships_resolutions_wwwhoolicom"
        },
        {
          "info": {
            "name": "VirusTotal Delete a Graph",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://www.virustotal.com/api/v3/graphs/:id",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "A 65 char length id which uniquely identify the graph."
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "VirusTotal Delete a Graph"
        },
        {
          "info": {
            "name": "VirusTotal Get Comments on a Graph",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/graphs/:id/comments",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "A 65 char length id which uniquely identify the graph."
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Maximum number of related objects to retrieve"
              },
              {
                "name": "cursor",
                "value": "",
                "type": "query",
                "description": "Continuation cursor"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "This endpoint returns the comments posted in a given graph. Check [Graph comments relationship page](https://gtidocs.virustotal.com/reference/graph-comments) to know more about the returned object.\n"
        },
        {
          "info": {
            "name": "VirusTotal Add a Comment to a Graph",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://www.virustotal.com/api/v3/graphs/:id/comments",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "A 65 char length id which uniquely identify the graph."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "VirusTotal Add a Comment to a Graph"
        },
        {
          "info": {
            "name": "VirusTotal Get Object Descriptors Related to a Graph",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/graphs/:id/relationships/:relationship",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "A 65 char length id which uniquely identify the graph."
              },
              {
                "name": "relationship",
                "value": "",
                "type": "path",
                "description": "Relationship name (see [table](ref:graph-object#relationships))"
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Maximum number of related objects to retrieve"
              },
              {
                "name": "cursor",
                "value": "",
                "type": "query",
                "description": "Continuation cursor"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "This endpoint is the same as [/graphs/{id}/{relationship}](https://gtidocs.virustotal.com/reference/graphs-relationships) except it returns just the related object's IDs (and context attributes, if any) instead of returning all attributes.\n"
        },
        {
          "info": {
            "name": "VirusTotal Get Objects Related to a Graph",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/graphs/:id/:relationship",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "A 65 char length id which uniquely identify the graph."
              },
              {
                "name": "relationship",
                "value": "",
                "type": "path",
                "description": "Relationship name (see [table](ref:graph-object#relationships))"
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Maximum number of related objects to retrieve"
              },
              {
                "name": "cursor",
                "value": "",
                "type": "query",
                "description": "Continuation cursor"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Graph objects have number of relationships to other objects. As mentioned in the  [Relationships](https://gtidocs.virustotal.com/reference/relationships) section, those related objects can be retrieved by sending `GET` requests to the relationship URL. \n\nSome relationships are accesible only to users who have access to Google Threat Intelligence.\n\nThe relationships supported by graph objects are documented in the [Graph](https://gtidocs.virustotal.com/reference/graph-object) API object page.\n\n``"
        }
      ]
    }
  ],
  "bundled": true
}