Skip to main content
POST
security.file.behaviour

Authorizations

Authorization
string
header
required

API key: sk_live_…

Headers

Idempotency-Key
string

Optional. A retry with the same key returns the stored result.

Maximum string length: 255
Pramaan-Max-Price-Micro
string

Optional. The most this request may be priced at, in micro-USD (a whole number above 0). It replaces the capability's own price ceiling for this request, lower or higher. Sources that could cost more are left out; when none is left the answer is 400 with the lowest limit that would work.

Pattern: ^[1-9]\d{0,14}$

Body

application/json
hash
string
required

MD5, SHA-1 or SHA-256 file content hash.

Pattern: ^(?:[a-f0-9]{32}|[a-f0-9]{40}|[a-f0-9]{64})$

Response

The result

hash
string
required

The file content hash checked.

processActions
string[]
required

Bounded action names, never command lines.

fileChanges
string[]
required

Bounded file change action names, never file paths.

registryChanges
string[]
required

Bounded registry action names, never keys or values.

domains
string[]
required

Contacted public domains.

ips
string[]
required

Contacted public IP addresses.

techniques
string[]
required

Public ATT&CK technique identifiers.