get_submission_iocs
Extract Indicators of Compromise (IOCs) from a specific malware analysis submission using its UUID to identify threat artifacts and malicious activity patterns.
Instructions
Get all Indicators of Compromise for a specific submission.
Args: uuid: Submission UUID
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| uuid | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Implementation Reference
- src/threatzone_mcp/server.py:458-466 (handler)The main handler function decorated with @app.tool, which registers and implements the get_submission_iocs tool. It takes a submission UUID and retrieves IOCs via the ThreatZone API client.
@app.tool async def get_submission_iocs(uuid: str) -> Dict[str, Any]: """ Get all Indicators of Compromise for a specific submission. Args: uuid: Submission UUID """ return await get_client().get(f"/public-api/get/submission/{uuid}/iocs")