get_entities_related_to_an_url
Retrieve entities related to a URL, such as domains, IPs, files, reports, or malware families, by specifying a relationship type.
Instructions
Retrieve entities related to the the given URL.
The following table shows a summary of available relationships for URL objects.
Relationship | Description | Return type |
analyses | Analyses for the URL. | analyse |
associations | URL's associated objects (reports, campaigns, IoC collections, malware families, software toolkits, vulnerabilities, threat-actors), without filtering by the associated object type. | collection |
campaigns | Campaigns associated to the URL. | collection |
collections | IoC Collections associated to the URL. | collection |
comments | Community posted comments about the URL. | comment |
communicating_files | Files that communicate with a given URL when they're executed. | file |
contacted_domains | Domains from which the URL loads some kind of resource. | domain |
contacted_ips | IPs from which the URL loads some kind of resource. | ip_address |
downloaded_files | Files downloaded from the URL. | file |
embedded_js_files | JS files embedded in a URL. | file |
graphs | Graphs including the URL. | graph |
http_response_contents | HTTP response contents from the URL. | file |
last_serving_ip_address | Last IP address that served the URL. | ip_address |
malware_families | Malware families associated to the URL. | collection |
memory_pattern_parents | Files having a domain as string on memory during sandbox execution. | file |
network_location | Domain or IP for the URL. | domain or ip_address |
parent_resource_urls | Returns the URLs where this URL has been loaded as resource. | url |
redirecting_urls | URLs that redirected to the given URL. | url |
redirects_to | URLs that this url redirects to. | url |
referrer_files | Files containing the URL. | file |
referrer_urls | URLs referring the URL. | url |
related_collections | Returns the Collections of the parent Domains or IPs of this URL. | collection |
related_comments | Community posted comments in the URL's related objects. | comment |
related_reports | Reports that are directly and indirectly related to the URL. | collection |
related_threat_actors | URL's related threat actors. | collection |
reports | Reports directly associated to the URL. | collection |
software_toolkits | Software and Toolkits associated to the URL. | collection |
submissions | URL's submissions. | url |
urls_related_by_tracker_id | URLs that share the same tracker ID. | url |
user_votes | URL's votes made by current signed-in user. | vote |
votes | Votes for the URL. | vote |
vulnerabilities | Vulnerabilities associated to the URL. | collection |
Args: url (required): URL to analyse. relationship_name (required): Relationship name. descriptors_only (required): Bool. Must be True when the target object type is one of file, domain, url, ip_address or collection. limit: Limit the number of objects to retrieve. 10 by default. Returns: List of entities related to the URL.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | ||
| limit | No | ||
| descriptors_only | Yes | ||
| relationship_name | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |