Get a finding
A single finding and its asset. Secrets are masked.
GET/v1/watch/findings/{id}GETGet a findingcurl -X GET "https://api.darkradar.com/api/public/v1/watch/findings/64b1f0c2a9e4d21f8c3b9a10" \ -H "x-api-key: $DARKRADAR_API_KEY"
Response
{
"success": true,
"data": {
"id": "64b1f0c2a9e4d21f8c3b9a30",
"status": "new",
"severity": "high",
"source": "DarkRadar",
"exposedDataTypes": [
"password",
"email"
],
"assetId": "64b1f0c2a9e4d21f8c3b9a20",
"assetType": "email",
"assetValue": "[email protected]",
"leakedSecretMasked": "Ya******23",
"contentLocked": false,
"firstSeenAt": "2026-09-10T00:00:00.000Z",
"detectedAt": "2026-09-12T06:00:00.000Z",
"details": {
"computerName": "DESKTOP-***",
"stealerFamily": "Lumma",
"operatingSystem": "Windows 11",
"country": "TR"
}
}
}Path parameters
| Fields | Values |
|---|---|
id · string · required | Record id (24 hex chars) · Example: 64b1f0c2a9e4d21f8c3b9a10 |
Responses
200Success400Invalid request (malformed id, missing or invalid field)401Key missing, invalid, expired or revoked403Insufficient scope, no API access in plan, or product not enabled404Record not found or not owned by this key’s firm408The request exceeded its maximum response time429Rate limit exceeded; retry after a minuteResponse limits
Rate limit500 requests per 15 min · per IP