Get Industrial Threat Intelligence report list

The ics/get_list endpoint is used to display the list of Industrial Threat Intelligence reports published on Kaspersky Threat Intelligence Portal.

Request

Request method: POST

Endpoint: https://tip.kaspersky.com/api/ics/get_list

Query parameters:

Expected parameters

Parameter	Description
date_start	Optional parameter. Includes only Industrial Threat Intelligence reports that were published starting from and including the specified date onwards. The default value is `1`.
date_end	Optional parameter. Includes only Industrial Threat Intelligence reports that were published only until and including the specified date. The default value is `time()`—current time.

The date_start and date_end parameters must be specified in the UNIX time stamp system (the number of seconds that have elapsed since 00:00:00 (UTC), 1 January 1970). If these parameters are not specified, the Kaspersky Threat Intelligence Portal API returns a list of all Industrial Threat Intelligence reports.

Request example:

Get a list of Industrial reports:

curl -u <user_name> -H 'Content-Length: 0' --cert <full path to the certificate CERT_NAME.pem on your computer> -X POST 'https://tip.kaspersky.com/api/ics/get_list?date_start=1584551570'

Responses

Click the links below for information about possible responses.

Expand all | Collapse all

200 OK

Request processed successfully.

Endpoint returns the following parameters.

200 OK response parameters

Parameter	Description
publications	Array with the keys described in this table.
id	Industrial Threat Intelligence report ID. This value can be used as a `publication_id` argument for the `get_one` endpoint.
updated	Time stamp when the Industrial Threat Intelligence report was updated.
published	Time stamp when the Industrial Threat Intelligence report was published.
name	Industrial Threat Intelligence report name.
desc	Industrial Threat Intelligence report description.
report_group	Industrial Threat Intelligence report group (`"ics")`.
tags	Array of all tags associated with the Industrial Threat Intelligence report. For example: `["turla", "epic turla"]`.
tags_industry	Array of industry tags associated with the report: industries that are involved in APT attacks or mentioned in Crimeware Threat Intelligence reports. For example: ["`Activists`", "`Zoo`"].
tags_geo	Array of geography tags associated with the report: countries and regions that are targeted by APTs or mentioned in Crimeware Threat Intelligence reports. For example: ["`Egypt`", "`Iran`", "`Jordan`"].
tags_actors	Array of actor tags associated with the report: personalities or companies that are involved in APT attacks or mentioned in Crimeware Threat Intelligence reports. For example: ["`APT28`"].
pdfs	Array of two-letter codes of the languages in which the Industrial Threat Intelligence report is available. The value can be one of the following: `ru` (Russian), `en` (English), `pt` (Portuguese), or `es` (Spanish). You can specify an available value as a value for the `lang` parameter for the `get_one` endpoint to fetch the Industrial report in the specified language.
Count	Total number of returned reports.

Tag values can contain UTF-8 (Unicode Transformation Format 8-bit) symbols. The list of values is not limited, and tags can be added or deleted without prior notification.

Response samples

Get all Industrial Threat Intelligence reports:

curl -u <user_name> -H 'Content-Length: 0' --cert <full path to the certificate CERT_NAME.pem on your computer> -X POST 'https://tip.kaspersky.com/api/publications/get_list'

See result example

Get the Industrial Threat Intelligence reports within a specific timeframe:

curl -u <user_name> -H 'Content-Length: 0' --cert <full path to the certificate CERT_NAME.pem on your computer> -X POST 'https://tip.kaspersky.com/api/publications/get_list?date_start=1490628942&date_end=1490628942'

You can convert the date into UNIX format at www.epochconverter.com.

Result example is the same as for getting all Industrial Threat Intelligence reports (see example above).

401 Unauthorized

403 Forbidden

451 Unavailable For Legal Reasons