{
  "opencollection": "1.0.0",
  "info": {
    "name": "VirusTotal API v3 - Access Control Access Control - Group Management YARA Hunting - IoC Stream API",
    "version": "3.0"
  },
  "request": {
    "auth": {
      "type": "apikey",
      "key": "x-apikey",
      "value": "{{x-apikey}}",
      "placement": "header"
    }
  },
  "items": [
    {
      "info": {
        "name": "YARA Hunting - IoC Stream",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "VirusTotal Get Objects from the IoC Stream",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/ioc_stream",
            "params": [
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Number of objects to retrieve (max 40)"
              },
              {
                "name": "descriptors_only",
                "value": "",
                "type": "query",
                "description": "The response returns only objects descriptors instead of whole VT objects"
              },
              {
                "name": "filter",
                "value": "",
                "type": "query",
                "description": "Filter string"
              },
              {
                "name": "cursor",
                "value": "",
                "type": "query",
                "description": "Continuation cursor"
              },
              {
                "name": "order",
                "value": "",
                "type": "query",
                "description": "Sort order"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "The IoC stream endpoint returns different types of objects (files, URLs, domains, IP addresses) coming from multiple origins (you can restrict the returned types by using the filters explained below). In addition, depending on the origin of the notification there will be different context attributes added to these objects.\n\nThe possible context attributes in IoC Stream objects are:\n\n- `notification_id`: \\<_string_> Always present. This string identifies the notification, and can be used to retri"
        },
        {
          "info": {
            "name": "VirusTotal Delete Notifications from the IoC Stream",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://www.virustotal.com/api/v3/ioc_stream",
            "params": [
              {
                "name": "filter",
                "value": "",
                "type": "query",
                "description": "Filter string"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Uses the same filters than the IoC Stream ([GET /ioc_stream](https://gtidocs.virustotal.com/reference/get-objects-from-the-ioc-stream)) to delete all the matching notifications.\n"
        },
        {
          "info": {
            "name": "VirusTotal Get an IoC Stream Notification",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/ioc_stream_notifications/:id",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "The ID of the IoC Stream notification"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Returns an IoC Stream notification.\n"
        },
        {
          "info": {
            "name": "VirusTotal Delete an IoC Stream Notification",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://www.virustotal.com/api/v3/ioc_stream_notifications/:id",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "The ID of the IoC Stream notification"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Deletes an IoC Stream notification.\n"
        }
      ]
    }
  ],
  "bundled": true
}