Mandiant

Mandiant File Library API

File Library objects that can be attached to Actions.

Documentation GitHub OpenAPI

Operations 1

GET /manage_sims/file_library_listing List file library objects #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/mandiant:mandiant-file-library-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Mandiant File Library API
  version: '1.0'
  description: 'Operations tagged File Library across 4 of this provider''s published API definitions: mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml, mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml. Each path carries the servers of the definition it was published in.'
tags:
- name: File Library
  description: File Library objects that can be attached to Actions.
paths:
  /manage_sims/file_library_listing:
    get:
      summary: List file library objects
      tags:
      - File Library
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/file_library_object'
              example:
              - id: 1
                orig_file_name: 70127_YK90054_Consulta_del_caliente.chm
                file_location: file_transfer_library_1
                filesize: 12117
                file_type: MS Windows HtmlHelp Data
                file_notes: 'This Compiled HTML file is a downloader for AGENTTESLA. AGENTTESLA is a .NET infostealer with the following capabilities: keylogger, copy/paste capture, screen capture, password stealing, webcam capture, USB spreading, and anti-analysis. AgentTesla can be configured to exfiltrate data via webpanel but can be configured to exfil data via SMTP or FTP as well.'
                created_at: '2021-05-13T16:16:46.390Z'
                updated_at: '2021-05-13T16:16:46.683Z'
                disabled: false
                file_restrictions: none
                related_actions:
                - id: 10
                  vid: A111-001
                  name: 'Malicious File Transfer - SLOWJAM, Download, Release #1'
                verodin_tags:
                - Group:Verodin
                - Malware:AGENTTESLA
                - Malware_Type:DOWNLOADER
                user_tags: []
              - id: 2
                orig_file_name: 1ab50b77dd9515f6cd9ed07d1d3176ba4627a292dc4a21b16ac9d211353818bd.mal_
                file_location: file_transfer_library_2
                filesize: 15640788
                file_type: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=203576cea788de2ca19a97c18ed07a455f91cece, stripped
                file_notes: This is a variant of SLOWPULSE. SLOWPULSE is trojanized shared object that was seen during CVE-2021-22893 exploitation. SLOWPULSE trojanizes shared objects with malicious code to log credentials and bypass authentication flows, including multifactor authentication requirements.
                created_at: '2021-05-13T16:16:46.708Z'
                updated_at: '2021-05-13T16:16:47.050Z'
                disabled: false
                file_restrictions: restricted_malicious
                related_actions:
                - id: 10
                  vid: A111-002
                  name: 'Malicious File Transfer - SLOWJAM, Download, Release #2'
                verodin_tags:
                - Group:Verodin
                - Malware:SLOWJAM
                - Malware_Type:TROJAN
                user_tags:
                - Deep Groove
      operationId: getManageSimsFileLibraryListing
      x-operation-id-source: derived
components:
  schemas:
    file_library_object:
      type: object
      properties:
        id:
          type: string
          description: File library object identifier in the Director
        orig_file_name:
          type: string
          description: File name
        file_location:
          type: string
          description: Location of the File library object
        filesize:
          type: integer
          description: Size of the file
        file_type:
          type: string
          description: Brief explanation of File library type
        file_notes:
          type: string
          description: Description of the file library object's purpose or details
        created_at:
          type: string
          description: Timestamp of file library object's creation
        updated_at:
          type: string
          description: Timestamp of file library object's last change
        disabled:
          type: boolean
          description: File library object's enabled/disabled state
        file_restrictions:
          type: string
          enum:
          - restricted_malicious
          - none
          description: Determination of file library's general execution authorization
        related_actions:
          type: array
          items:
            type: string
          description: Details about actions that refer to this file library
        verodin_tags:
          type: array
          items:
            type: string
          description: List of system tags
        user_tags:
          type: array
          items:
            type: string
          description: List of user-created tags
x-refined-from:
- mandiant-ma-sv-openapi.yml
- mandiant-msv-openapi.yml
- mandiant-ma-sv-openapi.yml
- mandiant-msv-openapi.yml