# Recorded Future recorded-future-sandbox-api-secopsti

**Canonical:** https://apis.io/apis/recorded-future/sandbox-api-secopsti/  
**Provider:** Recorded Future — https://apis.io/providers/recorded-future/  
**Base URL:** https://sandbox.recordedfuture.com/api/v0  
**Documentation:** https://docs.recordedfuture.com/reference/sandbox/llms.txt

Recorded Future recorded-future-sandbox-api-secopsti is one of 25 APIs that [Recorded Future](https://apis.io/providers/recorded-future/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 3 JSON Schema definitions. Tagged areas include Threat Intelligence and Cybersecurity. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, and 3 JSON Schemas.

Recorded Future Sandbox API (formerly Hatching Tria.ge). Provides malware analysis capabilities including file/URL submission, behavioral analysis, YARA rule management, and organizational settings.

## Operations (33)

| Method | Path | Summary |
|---|---|---|
| GET | `/geolocations` | List geolocations |
| POST | `/profiles` | Create profile |
| GET | `/profiles` | List profiles |
| DELETE | `/profiles/{profileID}` | Delete profile |
| GET | `/profiles/{profileID}` | Get profile |
| PUT | `/profiles/{profileID}` | Update profile |
| GET | `/resources` | List resources |
| GET | `/samples` | List samples |
| POST | `/samples` | Submit a sample |
| GET | `/samples/events` | Stream all sample events |
| DELETE | `/samples/{sampleID}` | Delete a sample |
| GET | `/samples/{sampleID}` | Get sample details |
| GET | `/samples/{sampleID}/archive` | Download sample archive (TAR) |
| GET | `/samples/{sampleID}/archive.zip` | Download sample archive (ZIP) |
| GET | `/samples/{sampleID}/events` | Stream sample events |
| GET | `/samples/{sampleID}/overview.json` | Get overview report |
| POST | `/samples/{sampleID}/profile` | Set analysis profile |
| GET | `/samples/{sampleID}/reports/static` | Get static analysis report |
| GET | `/samples/{sampleID}/sample` | Download original sample |
| GET | `/samples/{sampleID}/summary` | Get sample summary |
| GET | `/samples/{sampleID}/urlscan1/report_urlscan.json` | Get URL scan report |
| GET | `/samples/{sampleID}/urlscan1/screenshot.png` | Get URL scan screenshot |
| GET | `/samples/{sampleID}/{taskID}/dump.pcap` | Download PCAP |
| GET | `/samples/{sampleID}/{taskID}/dump.pcapng` | Download PCAPNG |
| GET | `/samples/{sampleID}/{taskID}/files/{fileName}` | Download task file |
| GET | `/samples/{sampleID}/{taskID}/logs/{logType}.json` | Get behavioral logs |
| GET | `/samples/{sampleID}/{taskID}/report_triage.json` | Get dynamic analysis report |
| GET | `/search` | Search samples |
| POST | `/yara` | Create YARA rule |
| GET | `/yara` | List YARA rules |
| DELETE | `/yara/{ruleName}` | Delete YARA rule |
| GET | `/yara/{ruleName}` | Get YARA rule |
| PUT | `/yara/{ruleName}` | Update YARA rule |

## Machine-readable artifacts (5)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-sandbox-api-secopsti-api-openapi.yml
- **APIReference** — https://docs.recordedfuture.com/reference
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-sample-detail-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-profile-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-sample-summary-schema.json

## Other Recorded Future APIs (12)

- [Recorded Future Intelligence Cloud API](https://apis.io/apis/recorded-future/recorded-future-connect-api/)
- [Recorded Future Alert API](https://apis.io/apis/recorded-future/alert/)
- [Recorded Future Analyst Note API](https://apis.io/apis/recorded-future/analyst-note/)
- [Recorded Future ASI Project API](https://apis.io/apis/recorded-future/asi-project/)
- [Recorded Future Autonomous Threat Operations API](https://apis.io/apis/recorded-future/autonomous-threat-operations/)
- [Recorded Future Case](https://apis.io/apis/recorded-future/case/)
- [Recorded Future Collective Insights API](https://apis.io/apis/recorded-future/collective-insights/)
- [Recorded Future Common Platform Enumeration APIs V0](https://apis.io/apis/recorded-future/common-platform-enumeration-apis-v0/)
- [Recorded Future Customer APIs V0](https://apis.io/apis/recorded-future/customer-apis-v0/)
- [Recorded Future Customer APIs V2](https://apis.io/apis/recorded-future/customer-apis-v2/)
- [Recorded Future Detection Rule API](https://apis.io/apis/recorded-future/detection-rule/)
- [Recorded Future Detection Rule Relation API](https://apis.io/apis/recorded-future/detection-rule-relation/)

## Tags

Threat Intelligence, Cybersecurity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/recorded-future/sandbox-api-secopsti/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/recorded-future/.