Show Malwares Detected for an Image 

Parameter	Mandatory/Optional	Data Type	Description
imageSha	Mandatory	string	Specify the SHA value of an image.
filter	Optional	string	Filter the list by providing a QQL search query. Refer to the “How to Search” topic in the online help for assistance with creating your query.
pageNumber	Optional	integer	Specify the page to be returned. Page numbers start with 1.
pageSize	Optional	integer	Specify the number of records to be included in the response.

API Request

curl -X "GET"
"<qualys_base_url>/csapi/v1.3/images/9287a1a2856378618469b0460cb295799ec99506c3d9697193fad51276235b7d/layers/malware?pageNumber=1&pageSize=50"
-H "accept: application/json"
-H "Authorization: Bearer <token>"

Response

{
    "data": [
        {
            "layerHash": "3c779f3ff212ad57ac3c4ba19cbf8e0104e50f27beb178a4e69df5c8e70ac988",
            "layerFileName": "layer.tar",
            "layerMimeType": "application/x-tar",
            "layerCreatedDate": "1689812682000",
            "layerFilesAnalyzed": 1,
            "layerMalwareCount": 1,
            "prediction": "malicious",
            "score": 1,
            "severity": 3,
            "category": "dropper",
            "family": "mirai",
            "createdBy": null
        },
        {
            "layerHash": "994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7",
            "layerFileName": "layer.tar",
            "layerMimeType": "application/x-tar",
            "layerCreatedDate": "1689811077000",
            "layerFilesAnalyzed": 16,
            "layerMalwareCount": 0,
            "prediction": "unknown",
            "score": null,
            "severity": null,
            "category": null,
            "family": null,
            "createdBy": null
        }
    ],
    "count": 2,
    "groups": {}
}

Error Response

The following error response is seen when the sub-users don't have permission to the specified image.

    {  
    "errorCode": "403 FORBIDDEN",  
    "message": "Request Forbidden",  
    "timestamp": 1700721586546
    }