# Recorded Future Malware Intelligence

**Canonical:** https://apis.io/apis/recorded-future/malware-intelligence/  
**Provider:** Recorded Future — https://apis.io/providers/recorded-future/  
**Base URL:** https://api.recordedfuture.com/malware-intelligence  
**Documentation:** https://docs.recordedfuture.com/reference/malware-intelligence/llms.txt

Recorded Future Malware Intelligence is one of 25 APIs that [Recorded Future](https://apis.io/providers/recorded-future/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Threat Intelligence and Cybersecurity. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, and 6 JSON Schemas.

A Recorded Future API for Malware Intelligence. The Malware Intelligence API provides programmatic access to the functionality of Recorded Future Malware Intelligence.

## Operations (16)

| Method | Path | Summary |
|---|---|---|
| POST | `/v1/auto-sigma/get_jobs` | Get all jobs created by user |
| POST | `/v1/auto-sigma/jobs` | Create a Auto Sigma job |
| DELETE | `/v1/auto-sigma/jobs/{jobId}` | Delete a Job |
| GET | `/v1/auto-sigma/jobs/{jobId}` | Get result of a job |
| POST | `/v1/auto-sigma/jobs/{jobId}/retry` | Retry a Job |
| POST | `/v1/auto-sigma/jobs/{jobId}/{ruleId}` | Update a Sigma Rule |
| POST | `/v1/auto-yara/jobs` | Create an Auto YARA job |
| GET | `/v1/auto-yara/jobs` | Get all jobs created by user |
| POST | `/v1/auto-yara/jobs/edit` | Edit an Auto YARA job |
| DELETE | `/v1/auto-yara/jobs/{jobId}` | Delete a Job |
| GET | `/v1/auto-yara/jobs/{jobId}` | Get result of a job |
| POST | `/v1/auto-yara/jobs/{jobId}/retry` | Retry a Job |
| POST | `/v1/query` | Query Malware Intelligence data with query language |
| POST | `/v1/query_iocs` | Query Malware Intelligence data with lists of entities |
| POST | `/v1/query_nl` | Query Malware Intelligence data with natural language |
| POST | `/v1/reports` | Fetch sandbox reports for a given sha256 hash and query |

## Machine-readable artifacts (8)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-malware-intelligence-api-openapi.yml
- **APIReference** — https://docs.recordedfuture.com/reference
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-create-yara-job-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-create-sigma-job-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-get-sigma-job-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-edit-yara-job-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-query-nlresponse-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-get-sigma-jobs-request-schema.json

## Other Recorded Future APIs (12)

- [Recorded Future Intelligence Cloud API](https://apis.io/apis/recorded-future/recorded-future-connect-api/)
- [Recorded Future Alert API](https://apis.io/apis/recorded-future/alert/)
- [Recorded Future Analyst Note API](https://apis.io/apis/recorded-future/analyst-note/)
- [Recorded Future ASI Project API](https://apis.io/apis/recorded-future/asi-project/)
- [Recorded Future Autonomous Threat Operations API](https://apis.io/apis/recorded-future/autonomous-threat-operations/)
- [Recorded Future Case](https://apis.io/apis/recorded-future/case/)
- [Recorded Future Collective Insights API](https://apis.io/apis/recorded-future/collective-insights/)
- [Recorded Future Common Platform Enumeration APIs V0](https://apis.io/apis/recorded-future/common-platform-enumeration-apis-v0/)
- [Recorded Future Customer APIs V0](https://apis.io/apis/recorded-future/customer-apis-v0/)
- [Recorded Future Customer APIs V2](https://apis.io/apis/recorded-future/customer-apis-v2/)
- [Recorded Future Detection Rule API](https://apis.io/apis/recorded-future/detection-rule/)
- [Recorded Future Detection Rule Relation API](https://apis.io/apis/recorded-future/detection-rule-relation/)

## Tags

Threat Intelligence, Cybersecurity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/recorded-future/malware-intelligence/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/recorded-future/.