Get Custom Malware Feed

GET 
/api/v33.01/feeds/custom/malware

x-prisma-cloud-target-env: {"permission":"user"}

Returns the customized list of MD5 signatures of malicious executables.

cURL Request

Refer to the following cURL command that retrieves the list of MD5 signatures of malicious executables:

$ curl -k \
  -u <USER> \
  -H 'Content-Type: application/json' \
  -X GET \
  "https://<CONSOLE>/api/v<VERSION>/feeds/custom/malware"

Response

A successful response will return a list of MD5 signatures of malicious executables.

{
    "_id":"<ID>",
    "modified":"2020-11:00:00T00:00:01.62Z",
    "feed": [
        {
            "name": "dimaaa",
            "md5": "d4ba1008e7d97458fdd65deca2ba801b"
        },
        {
            "name": "emacs",
            "md5": "5ce9d1116755f827f5d1e06246dd30b9"
        }
    ]
    "digest":"<DIGEST>"
}

Responses

200

CustomMalwareFeed represent the custom malware

application/json

Schema

Schema

_id string

ID is the custom feed id.

digest string

Digest is an internal digest of the feed.

feed object[]
Feed is the list of custom malware signatures.
Array [
allowed boolean
Allowed indicates if this signature is on the allowed list.
md5 string
.
modified int64
Modified is the time the malware was added to the DB.
name string
.
]
modified date-time

Modified is the last time the custom feed was modified.

Example (from schema)

{
  "_id": "string",
  "digest": "string",
  "feed": [
    {
      "allowed": true,
      "md5": "string",
      "modified": 0,
      "name": "string"
    }
  ],
  "modified": "2024-07-29T15:51:28.071Z"
}

default

Loading...