Show Malwares Detected for an Image

Shows a list of malwares detected for all layers of an image.

GET/csapi/v1.3/images/{imageSha}/layers/malware

Input ParametersInput Parameters

Parameter	Mandatory/Optional	Data Type	Description
imageSha	Mandatory	string	Specify the SHA value of an image.
filter	Optional	string	Filter the list by providing a QQL search query. Refer to the “How to Search” topic in the online help for assistance with creating your query.
pageNumber	Optional	integer	Specify the page to be returned. Page numbers start with 1.
pageSize	Optional	integer	Specify the number of records to be included in the response.

Sample: Fetch a List of Detected Malwares for an ImageSample: Fetch a List of Detected Malwares for an Image

API Request

curl -X "GET"
"<qualys_base_url>/csapi/v1.3/images/9287a1a2856378618469b0460cb295799ec99506c3d9697193fad51276235b7d/layers/malware?pageNumber=1&pageSize=50"
-H "accept: application/json"
-H "Authorization: Bearer <token>"

Response

{
    "data": [
        {
            "layerHash": "3c779f3ff212ad57ac3c4ba19cbf8e0104e50f27beb178a4e69df5c8e70ac988",
            "layerFileName": "layer.tar",
            "layerMimeType": "application/x-tar",
            "layerCreatedDate": "1689812682000",
            "layerFilesAnalyzed": 1,
            "layerMalwareCount": 1,
            "prediction": "malicious",
            "score": 1,
            "severity": 3,
            "category": "dropper",
            "family": "mirai",
            "createdBy": null
        },
        {
            "layerHash": "994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7",
            "layerFileName": "layer.tar",
            "layerMimeType": "application/x-tar",
            "layerCreatedDate": "1689811077000",
            "layerFilesAnalyzed": 16,
            "layerMalwareCount": 0,
            "prediction": "unknown",
            "score": null,
            "severity": null,
            "category": null,
            "family": null,
            "createdBy": null
        }
    ],
    "count": 2,
    "groups": {}
}