API documentation

List CTI case analyses

Lists CTI case analyses produced for your organization. Each row carries the event id, case number, stealer family, protected asset and risk. Restricted keys only see analyses of permitted resource groups.

GET/v1/analyses
GETList CTI case analyses
curl -X GET "https://api.darkradar.com/api/public/v1/analyses" \
  -H "x-api-key: $DARKRADAR_API_KEY"
Response

Success

{
  "success": true,
  "data": {
    "items": [
      {
        "id": "6ab7f2aba36b79c7f4ed8ea7",
        "title": "DARKRADAR#SOURCE-6ab-672",
        "status": "completed",
        "eventId": "6ab04d3323bddca062e8b106",
        "caseNo": "DARKRADAR#SOURCE-6ab-672",
        "stealerFamily": "VIDAR",
        "protectedAsset": "darkradar.com",
        "riskScore": 80,
        "riskLevel": "high",
        "createdAt": "2026-09-27T09:12:00.000Z"
      }
    ]
  }
}

Access

Scopeinventory:read
Plan entitlementapi_access

Query parameters

FieldsValues
limit · integer · optionalMax analyses (1–100) · Example: 25
page · integer · optionalPage number · Example: 1
search · string · optionalFree-text search in title

Responses

200Success
400Invalid request (malformed id, missing or invalid field)
401Key missing, invalid, expired or revoked
403Insufficient scope, no API access in plan, or product not enabled
404Record not found or not owned by this key’s firm
408The request exceeded its maximum response time
429Rate limit exceeded; retry after a minute

Response limits

Page sizelimit · default 25 · max 100
Rate limit500 requests per 15 min · per IP

Was this page helpful?