Skip to main content

File Intel API Reference

The File Intel service enables you to submit a file's hash and get the file's attributes back - giving you insight into the disposition of the file.

Run In Postman
Base URL​

file-intel.<csp>.<region>.pangea.cloud

post/v2/reputation
curl -sSLX POST 'https://file-intel.aws.us.pangea.cloud/v2/reputation' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Reputation

POST
https://file-intel.aws.us.pangea.cloud/v2/reputation

Retrieve a reputation score for a set of file hashes from a provider, including an optional detailed report. When requesting reputation for multiple file hashes, the response will be asynchronous. See API Reference/Asynchronous Responses

required parameters

string

One of "sha256", "sha", "md5".

array<string>

The hash of the file to be looked up

  • minItems: 1

  • maxItems: 100

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use reputation data from this provider

object

Pangea standard response schema

object
object

High-level normalized results sent by the Pangea service

array<string>

The categories that apply to this indicator as determined by the provider

integer

The score, given by the Pangea service, for the indicator

string

The verdict, given by the Pangea service, for the indicator

object

The parameters, which were passed in the request, echoed back

object

The raw data from the provider. Each provider's data will have its own format

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v1/reputation
curl -sSLX POST 'https://file-intel.aws.us.pangea.cloud/v1/reputation' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Reputation (deprecated)

POST
https://file-intel.aws.us.pangea.cloud/v1/reputation

Retrieve a reputation score for a file hash from a provider, including an optional detailed report.

required parameters

string

One of "sha256", "sha", "md5".

string

The hash of the file to be looked up

  • minLength: 32
boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use reputation data from this provider

object

Pangea standard response schema

object
object

High-level normalized results sent by the Pangea service

array<string>

The categories that apply to this indicator as determined by the provider

integer

The score, given by the Pangea service, for the indicator

string

The verdict, given by the Pangea service, for the indicator

object

The parameters, which were passed in the request, echoed back

object

The raw data from the provider. Each provider's data will have its own format

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

Was this article helpful?

Contact us