Show Malwares Detected for an Image

Shows a list of malwares detected for all layers of an image.

GET/csapi/v1.3/images/{imageSha}/layers/malware

Input ParametersInput Parameters

Parameter Mandatory/Optional Data Type Description
imageSha Mandatory string Specify the SHA value of an image.
filter Optional string

Filter the list by providing a QQL search query.

Refer to the “How to Search” topic in the online help for assistance with creating your query.

pageNumber Optional integer

Specify the page to be returned.

Page numbers start with 1.

pageSize Optional integer Specify the number of records to be included in the response.

Sample: Fetch a List of Detected Malwares for an ImageSample: Fetch a List of Detected Malwares for an Image

API Request

curl -X "GET"
"<qualys_base_url>/csapi/v1.3/images/9287a1a2856378618469b0460cb295799ec99506c3d9697193fad51276235b7d/layers/malware?pageNumber=1&pageSize=50"
-H "accept: application/json"
-H "Authorization: Bearer <token>"

Response

{
    "data": [
        {
            "layerHash": "3c779f3ff212ad57ac3c4ba19cbf8e0104e50f27beb178a4e69df5c8e70ac988",
            "layerFileName": "layer.tar",
            "layerMimeType": "application/x-tar",
            "layerCreatedDate": "1689812682000",
            "layerFilesAnalyzed": 1,
            "layerMalwareCount": 1,
            "prediction": "malicious",
            "score": 1,
            "severity": 3,
            "category": "dropper",
            "family": "mirai",
            "createdBy": null
        },
        {
            "layerHash": "994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7",
            "layerFileName": "layer.tar",
            "layerMimeType": "application/x-tar",
            "layerCreatedDate": "1689811077000",
            "layerFilesAnalyzed": 16,
            "layerMalwareCount": 0,
            "prediction": "unknown",
            "score": null,
            "severity": null,
            "category": null,
            "family": null,
            "createdBy": null
        }
    ],
    "count": 2,
    "groups": {}
}

 

 

Was this topic helpful?

success Thank you! We're glad to hear that this topic was useful.
success We appreciate your feedback. We'll work to make this topic better for you in the future.