get_submission_indicators
Retrieve threat indicators from a malware analysis submission to identify malicious patterns and behaviors for security investigation.
Instructions
Get all indicators for a specific submission.
Args: uuid: Submission UUID
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| uuid | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Implementation Reference
- src/threatzone_mcp/server.py:447-456 (handler)The handler function decorated with @app.tool, which registers and implements the get_submission_indicators tool. It fetches indicators for a submission UUID from the ThreatZone API using the get_client() helper.
@app.tool async def get_submission_indicators(uuid: str) -> Dict[str, Any]: """ Get all indicators for a specific submission. Args: uuid: Submission UUID """ return await get_client().get(f"/public-api/get/submission/{uuid}/indicators") - src/threatzone_mcp/server.py:447-447 (registration)The @app.tool decorator registers the get_submission_indicators function as an MCP tool.
@app.tool