List dangling DNS findings.

curl --request GET \
  --url https://api.infrawatch.com/api/v1/projects/{project_uuid}/esi/findings/dangling-dns \
  --header 'X-API-Key: <api-key>'

import requests

url = "https://api.infrawatch.com/api/v1/projects/{project_uuid}/esi/findings/dangling-dns"

headers = {"X-API-Key": "<api-key>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('https://api.infrawatch.com/api/v1/projects/{project_uuid}/esi/findings/dangling-dns', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.infrawatch.com/api/v1/projects/{project_uuid}/esi/findings/dangling-dns"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "findings": [
    {
      "apex_domain": "<string>",
      "chain": [
        {
          "host": "<string>",
          "position": 1,
          "record_type": "<string>"
        }
      ],
      "claimable": true,
      "entry_host": "<string>",
      "last_seen_at": "2023-11-07T05:31:56Z",
      "logical_id": "<string>",
      "start": "2023-11-07T05:31:56Z",
      "state": {
        "accepted_at": "2023-11-07T05:31:56Z",
        "note": "<string>",
        "updated_at": "2023-11-07T05:31:56Z"
      },
      "answer_ip": "<string>",
      "answer_kind": "<string>",
      "domain_available": "<string>",
      "entry_record_type": "<string>",
      "entry_target": "<string>",
      "finding_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "lifecycle": "resolved",
      "page_sha256": "<string>",
      "provider": "<string>",
      "rcode": "<string>",
      "resolved_at": "2023-11-07T05:31:56Z",
      "rule_id": "<string>",
      "rule_name": "<string>",
      "service": "<string>",
      "status": "<string>",
      "terminal_domain": "<string>",
      "terminal_host": "<string>",
      "type": "<string>"
    }
  ],
  "pagination": {
    "limit": 123,
    "offset": 123,
    "total": 123
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

GET

https://api.infrawatch.com/api/v1

projects

{project_uuid}

esi

findings

dangling-dns

List dangling DNS findings.

curl --request GET \
  --url https://api.infrawatch.com/api/v1/projects/{project_uuid}/esi/findings/dangling-dns \
  --header 'X-API-Key: <api-key>'

import requests

url = "https://api.infrawatch.com/api/v1/projects/{project_uuid}/esi/findings/dangling-dns"

headers = {"X-API-Key": "<api-key>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('https://api.infrawatch.com/api/v1/projects/{project_uuid}/esi/findings/dangling-dns', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.infrawatch.com/api/v1/projects/{project_uuid}/esi/findings/dangling-dns"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "findings": [
    {
      "apex_domain": "<string>",
      "chain": [
        {
          "host": "<string>",
          "position": 1,
          "record_type": "<string>"
        }
      ],
      "claimable": true,
      "entry_host": "<string>",
      "last_seen_at": "2023-11-07T05:31:56Z",
      "logical_id": "<string>",
      "start": "2023-11-07T05:31:56Z",
      "state": {
        "accepted_at": "2023-11-07T05:31:56Z",
        "note": "<string>",
        "updated_at": "2023-11-07T05:31:56Z"
      },
      "answer_ip": "<string>",
      "answer_kind": "<string>",
      "domain_available": "<string>",
      "entry_record_type": "<string>",
      "entry_target": "<string>",
      "finding_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "lifecycle": "resolved",
      "page_sha256": "<string>",
      "provider": "<string>",
      "rcode": "<string>",
      "resolved_at": "2023-11-07T05:31:56Z",
      "rule_id": "<string>",
      "rule_name": "<string>",
      "service": "<string>",
      "status": "<string>",
      "terminal_domain": "<string>",
      "terminal_host": "<string>",
      "type": "<string>"
    }
  ],
  "pagination": {
    "limit": 123,
    "offset": 123,
    "total": 123
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "field_errors": [
      {
        "code": "<string>",
        "field": "<string>",
        "message": "<string>"
      }
    ],
    "request_id": "<string>"
  }
}

Authorizations

X-API-Key

string

header

required

Infrawatch API key. Supply the complete key directly as the header value.

Path Parameters

project_uuid

string<uuid>

required

Query Parameters

limit

integer

default:100

Required range: 1 <= x <= 500

offset

integer

default:0

Offset plus limit must not exceed the 10,000-finding result window.

Required range: 0 <= x <= 9999

lifecycle

enum<string>

default:active

Select active detector findings, resolved history, or a deduplicated union where a current active episode wins.

Available options:

active,

resolved,

all

string

Maximum string length: 256

sort

enum<string>[]

Field to order by. Repeat to order by several, applied left to right so a later field breaks ties in an earlier one. An unrecognised field is rejected rather than ignored, so a sort either applies or fails loudly. Ordering spans the whole result set rather than the page returned, and every order ends with a stable tiebreak so paging cannot skip a finding. The last three name the findings table's own columns and are aliases: finding orders by entry_host, signal by confidence, evidence by service.

Available options:

start,

last_seen,

entry_host,

apex_domain,

terminal_host,

provider,

service,

type,

confidence,

claimable,

finding,

signal,

evidence

direction

enum<string>[]

Direction for the sort field at the same position. Omitted, time and severity fields order newest or highest first and the rest order A-Z. Confidence orders by severity rather than alphabetically, where high would otherwise sit between low and medium.

Available options:

asc,

desc

finding_uuid

string<uuid>

Exact normalized finding UUID, used to deep-link to one project-scoped record.

logical_id

string

Maximum string length: 512

rule_id

string[]

Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 256

apex_domain

string[]

Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 256

entry_host

string[]

DNS owner name where the exposed path starts. Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 256

entry_record_type

string[]

Record type at the exposed entry point. Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 32

rcode

string[]

Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 64

answer_kind

string[]

Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 64

answer_ip

string[]

Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 128

entry_target

string

Case-insensitive substring of the entry record target.

Maximum string length: 256

type

string[]

Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 64

state_status

enum<string>[]

Customer-facing state after merging the normalized Postgres lifecycle state. Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Available options:

open,

accepted,

resolved,

ignored,

false_positive

confidence

string[]

Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 64

domain_available

string[]

Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 64

service

string

Maximum string length: 256

provider

string[]

Canonical provider family supplied by the matched rule. Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 256

terminal_host

string

Maximum string length: 256

terminal_domain

string[]

Registrable domain at the terminal risk boundary. Repeat or comma-separate for multi-select filtering.

Maximum array length: 25

Maximum string length: 256

claimable

boolean

start_from

string<date-time>

start_to

string<date-time>

Response

Dangling DNS findings.

findings

object[]

required

Show child attributes

pagination

object

required

Show child attributes

Start here

Search

External Surface Intelligence

Alerting

Remote Browser

Rules

Reports

Projects

Usage

List dangling DNS findings.

Authorizations

Path Parameters

Query Parameters

Response