# Recorded Future Detection Rule API

**Canonical:** https://apis.io/apis/recorded-future/detection-rule/  
**Provider:** Recorded Future — https://apis.io/providers/recorded-future/  
**Base URL:** https://api.recordedfuture.com/detection-rule  
**Documentation:** https://docs.recordedfuture.com/reference/detection-rules/llms.txt

Recorded Future Detection Rule API is one of 25 APIs that [Recorded Future](https://apis.io/providers/recorded-future/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 2 JSON Schema definitions. Tagged areas include Threat Intelligence and Cybersecurity. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, and 2 JSON Schemas.

The Detection Rule API allows clients to programmatically search for and download YARA, Sigma, and Snort rules authored by Recorded Future's Insikt Group. Please read the [detailed support article](https://support.recordedfuture.com/hc/en-us/articles/5265933996819-Detection-Rule-API) before using this API.

## Operations (1)

| Method | Path | Summary |
|---|---|---|
| POST | `/search` | Search Detection Rules |

## Machine-readable artifacts (4)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-detection-rule-api-openapi.yml
- **APIReference** — https://docs.recordedfuture.com/reference
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-detection-rule-filter-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-detection-rule-result-schema.json

## Other Recorded Future APIs (12)

- [Recorded Future Intelligence Cloud API](https://apis.io/apis/recorded-future/recorded-future-connect-api/)
- [Recorded Future Alert API](https://apis.io/apis/recorded-future/alert/)
- [Recorded Future Analyst Note API](https://apis.io/apis/recorded-future/analyst-note/)
- [Recorded Future ASI Project API](https://apis.io/apis/recorded-future/asi-project/)
- [Recorded Future Autonomous Threat Operations API](https://apis.io/apis/recorded-future/autonomous-threat-operations/)
- [Recorded Future Case](https://apis.io/apis/recorded-future/case/)
- [Recorded Future Collective Insights API](https://apis.io/apis/recorded-future/collective-insights/)
- [Recorded Future Common Platform Enumeration APIs V0](https://apis.io/apis/recorded-future/common-platform-enumeration-apis-v0/)
- [Recorded Future Customer APIs V0](https://apis.io/apis/recorded-future/customer-apis-v0/)
- [Recorded Future Customer APIs V2](https://apis.io/apis/recorded-future/customer-apis-v2/)
- [Recorded Future Detection Rule Relation API](https://apis.io/apis/recorded-future/detection-rule-relation/)
- [Recorded Future Entity Match API](https://apis.io/apis/recorded-future/entity-match/)

## Tags

Threat Intelligence, Cybersecurity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/recorded-future/detection-rule/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/recorded-future/.