Skip to main content

Get Custom Malware Feed

GET 

/api/v32.07/feeds/custom/malware

x-prisma-cloud-target-env: {"permission":"user"}

Returns the customized list of MD5 signatures of malicious executables.

cURL Request

Refer to the following cURL command that retrieves the list of MD5 signatures of malicious executables:

$ curl -k \
-u <USER> \
-H 'Content-Type: application/json' \
-X GET \
"https://<CONSOLE>/api/v<VERSION>/feeds/custom/malware"

Response

A successful response will return a list of MD5 signatures of malicious executables.

{
"_id":"<ID>",
"modified":"2020-11:00:00T00:00:01.62Z",
"feed": [
{
"name": "dimaaa",
"md5": "d4ba1008e7d97458fdd65deca2ba801b"
},
{
"name": "emacs",
"md5": "5ce9d1116755f827f5d1e06246dd30b9"
}
]
"digest":"<DIGEST>"
}

Responses

CustomMalwareFeed represent the custom malware

Schema
    _id string

    ID is the custom feed id.

    digest string

    Digest is an internal digest of the feed.

    feed object[]

    Feed is the list of custom malware signatures.

  • Array [
  • allowed boolean

    Allowed indicates if this signature is on the allowed list.

    md5 string

    .

    modified int64

    Modified is the time the malware was added to the DB.

    name string

    .

  • ]
  • modified date-time

    Modified is the last time the custom feed was modified.

Loading...