Wildfire Api Sandbox Report Structure

Analysis results from a single sandbox execution environment.

Type: object Properties: 6

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

SandboxReport is a JSON Structure definition published by Palo Alto Networks, describing 6 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

platform software version summary network process_list

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-structure/wildfire-api-sandbox-report-structure.json",
  "name": "SandboxReport",
  "description": "Analysis results from a single sandbox execution environment.",
  "type": "object",
  "properties": {
    "platform": {
      "type": "string",
      "description": "Platform identifier (e.g., 100 for Windows XP SP3)."
    },
    "software": {
      "type": "string",
      "description": "Sandbox software environment."
    },
    "version": {
      "type": "string"
    },
    "summary": {
      "type": "object",
      "properties": {
        "@verdict": {
          "type": "string",
          "enum": [
            "benign",
            "malware",
            "grayware",
            "phishing"
          ]
        }
      }
    },
    "network": {
      "type": "object",
      "properties": {
        "dns": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "@query": {
                "type": "string"
              },
              "@response": {
                "type": "string"
              }
            }
          }
        },
        "tcp": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "@ip": {
                "type": "string"
              },
              "@port": {
                "type": "int32"
              },
              "@country": {
                "type": "string"
              }
            }
          }
        },
        "http": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "@request": {
                "type": "string"
              },
              "@response": {
                "type": "string"
              }
            }
          }
        }
      }
    },
    "process_list": {
      "type": "object",
      "properties": {
        "process": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "@name": {
                "type": "string"
              },
              "@pid": {
                "type": "string"
              },
              "@text": {
                "type": "string"
              }
            }
          }
        }
      }
    }
  }
}

Work with this as data

Every JSON Structure here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for json structure

4 MCP tools reach this

find_json_structuresBrowse and filter every JSON Structure in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This JSON Structure

curl "https://apis.io/api/v1/json-structures/wildfire-api-sandbox-report-structure"

All json structure

curl "https://apis.io/api/v1/json-structures?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.