Get a CTI case analysis

Returns a full analysis: context (event, protected asset, machine, case files), deterministic findings and evidence with file and line references, the analyst report and its evidence review, and the archive file list. File CONTENTS are not returned here; read them from the inventory endpoints where masking rules apply.

GET/v1/analyses/{id}

GETGet a CTI case analysis

curl -X GET "https://api.darkradar.com/api/public/v1/analyses/{id}" \
  -H "x-api-key: $DARKRADAR_API_KEY"

Response

Success

{
  "success": true,
  "data": {
    "id": "6ab7f2aba36b79c7f4ed8ea7",
    "title": "DARKRADAR#SOURCE-6ab-672",
    "status": "completed",
    "context": {
      "eventId": "6ab04d3323bddca062e8b106",
      "protectedAsset": "darkradar.com",
      "machine": {
        "operatingSystem": "Windows 10 Pro",
        "countryCode": "TR"
      }
    },
    "findings": {
      "riskScore": 80,
      "riskLevel": "high",
      "evidence": [
        {
          "type": "service_exposure",
          "source": "https:2083",
          "line": null,
          "label": "cPanel (TLS) — site yöneticisi (kritik, 3 adres)"
        }
      ]
    },
    "report": {
      "yoneticiOzeti": "…"
    }
  }
}

Access

Scopeinventory:read

Plan entitlementapi_access

Responses

200Success

400Invalid request (malformed id, missing or invalid field)

401Key missing, invalid, expired or revoked

403Insufficient scope, no API access in plan, or product not enabled

404Record not found or not owned by this key’s firm

408The request exceeded its maximum response time

429Rate limit exceeded; retry after a minute

Response limits

Rate limit500 requests per 15 min · per IP

{ "success": true, "data": { "id": "6ab7f2aba36b79c7f4ed8ea7", "title": "DARKRADAR#SOURCE-6ab-672", "status": "completed", "context": { "eventId": "6ab04d3323bddca062e8b106", "protectedAsset": "darkradar.com", "machine": { "operatingSystem": "Windows 10 Pro", "countryCode": "TR" } }, "findings": { "riskScore": 80, "riskLevel": "high", "evidence": [ { "type": "service_exposure", "source": "https:2083", "line": null, "label": "cPanel (TLS) — site yöneticisi (kritik, 3 adres)" } ] }, "report": { "yoneticiOzeti": "…" } } }