search_victims
Search ransomware victims by organization name or website domain, then filter by group, sector, or country to pinpoint relevant incidents for threat analysis.
Instructions
Free-text search across victim organisation names and website domains.
q is matched case-insensitively as a substring of both the victim name
and the website. The other filters narrow further with AND logic.
Args:
q: Keyword, e.g. "hospital", "university", "acme".
group: Exact group name, case-insensitive (see list_groups).
sector: Exact sector name (see list_sectors).
country: ISO 3166-1 alpha-2 country code, e.g. "US", "FR", "DE".
order: Sort by "discovered" or "attacked".
limit: Max records to return (1-200).
offset: Skip this many records; use next_offset from a prior call.
full: Include all enrichment fields.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| q | No | ||
| full | No | ||
| group | No | ||
| limit | No | ||
| order | No | discovered | |
| offset | No | ||
| sector | No | ||
| country | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||