Get IOC change report
GET https://{{host}}/etp-report/v3/ioc/changes?startTimeSec={{startTimeSec}}&endTimeSec={{endTimeSec}}&record={{record}}&recordType={{recordType}}
Lists historical change information for a given record and record type. Omit startTimeSec
and endTimeSec
from the request URL to return all available historical information.
Request Params
Key | Datatype | Required | Description |
---|---|---|---|
startTimeSec | string | (Required) The start time for report data, in epoch seconds. | |
endTimeSec | string | (Required) The end time for report data, in epoch seconds. | |
record | string | (Required) The target record from which to get blocklisted domains. | |
recordType | string | (Required) Enum Specifies the record type, either DOMAIN or IP . | |
accountSwitchKey | string | (Optional) For customers who manage more than one account, this runs the operation from another account. The Identity and Access Management API provides a list of available account switch keys. |
HEADERS
Key | Datatype | Required | Description |
---|---|---|---|
Accept | string |
RESPONSES
status: OK
[{"date":"2017-03-07T00:00:00Z","description":"First tracked","recordType":"DOMAIN","state":"ADDED"},{"date":"2017-03-07T00:00:00Z","description":"Severity upgraded from Unknown to Suspected Malware","key":"CONFIDENCE","listId":"1","listName":"Malware","newValue":"Suspected","oldValue":"Unknown","recordType":"DOMAIN","state":"CHANGED"}]