Get a Sample (WildFire API)
Table of Contents
Expand all | Collapse all
-
- Get a WildFire Verdict (WildFire API)
- Get Multiple WildFire Verdicts (WildFire API)
- Get a List of Samples with Changed WildFire Appliance Verdicts (WildFire API)
- Get a Sample (WildFire API)
- Get a Packet Capture (WildFire API)
- Get a WildFire Analysis Report (WildFire API)
- Get a Malware Test File (WildFire API)
- Get URL Web Artifacts
- WildFire API Error Codes
Get a Sample (WildFire API)
Use this resource to download sample files based on
the MD5 or SHA-256 hash value. Palo Alto Networks provides access
to malware samples collected by the WildFire cloud for 10 years,
while grayware sample are available for 14 days. Benign samples
are not available for download.
Resource
/get/sample/
Request Parameters
Use the following form
parameters when requesting a sample:
Parameters | Description | Example |
|---|---|---|
| (Required) API key | Example:
|
| (Required for Prisma Access and Prisma
Cloud Compute-based WildFire public API keys) Designates the
API key type | Example:
Options
include:
|
| (Required) MD5 or SHA-256 hash
value of the sample | Example:
|
Example Request
Make a POST request to
the /get/sample resource and include the
API key along with the MD5 or SHA-256 hash value of the sample.
Include the -JO option to use the Content-Disposition
filename as provided by the server, similar to the following cURL command:
curl -JO -F 'apikey=<API KEY>' -F 'hash=afe6b95ad95bc689c356f34ec8d9094c495e4af57c932ac413b65ef132063acc' 'https://wildfire.paloaltonetworks.com/publicapi/get/sample'
The
response saves the packet capture file. Example:
175aee5f236d464b3b825edc8cb71b47828f248356c36759a641d7da0db95323.xls.000