Threat Prevention
The Threat Prevention API endpoints are available to customers with an active Threat Prevention or Advanced Threat Prevention subscription. List of Threat Prevention API endpoints: 1. Link to Request Content Release Notes 2. Link to Request Threat Metadata 3. Link to Request Threat Signature Metadata in Batch Mode 4. Link to Request Threat Signature Release History
Authentication
- API Key: X-API-KEY
API key to query https://api.threatvault.paloaltonetworks.com/service/v1
| Security Scheme Type: | apiKey |
|---|---|
| Header parameter name: | X-API-KEY |
📄️ Request Content Release Notes
A GET request to retrieve the release notes information by type and version.
📄️ Request Threat Metadata
A GET request to retrieve threat metadata. The nature of the query is determined by the query parameter that you provide on the call to this API.
📄️ Request Threat Signature Metadata in Batch Mode
A POST request to retrieve the threats signature metadata by id, name or sample hash (sha256 or md5) in batch mode. Batch limit is 100 entries.
📄️ Request Threat Signature Release History
A GET request to retrieve the threats signature release history by id and package type.
📄️ Request Predefined EDL Content
A GET request to retrieve the predefined external dynamic lists by name and version.
📄️ Request IP Feed Information
A GET request to retrieve the IP feed information by name, IP address or IP address range.
📄️ Request IP Feed Information in Batch Mode
A POST request to retrieve the IP feed information by IP address. Batch limit is 100 entries.