ThreatEntry
Stay organized with collections
Save and categorize content based on your preferences.
An individual threat; for example, a malicious URL or its hash representation. Only one of these fields should be set.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License
, and code samples are licensed under the Apache 2.0 License
. For details, see the Google Developers Site Policies
. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-09-18 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-09-18 UTC."],[[["\u003cp\u003eThreatEntry defines an individual threat using either a hash, a URL, or a digest, but only one field should be populated at a time.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003ehash\u003c/code\u003e field represents a SHA256 hash prefix in binary format (base64-encoded for JSON).\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eurl\u003c/code\u003e field simply contains a URL string to specify the threat.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003edigest\u003c/code\u003e field holds the SHA256 digest of an executable, supporting both binary and hex formats (base64-encoded for JSON).\u003c/p\u003e\n"]]],["The JSON data represents a single threat, using either a `hash`, `url`, or `digest`. The `hash` is a base64-encoded SHA256 hash prefix (4-32 bytes). The `url` is a string representing a URL. The `digest` is a base64-encoded SHA256 digest of an executable, supporting both binary and hex. Only one of these fields should be populated in any given representation of this threat data.\n"],null,["# ThreatEntry\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n\nAn individual threat; for example, a malicious URL or its hash representation. Only one of these fields should be set.\n\n| JSON representation |\n|-------------------------------------------------------------|\n| ``` { \"hash\": string, \"url\": string, \"digest\": string } ``` |\n\n| Fields ||\n|----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `hash` | `string (`[bytes](https://developers.google.com/discovery/v1/type-format)` format)` A hash prefix, consisting of the most significant 4-32 bytes of a SHA256 hash. This field is in binary format. For JSON requests, hashes are base64-encoded. A base64-encoded string. |\n| `url` | `string` A URL. |\n| `digest` | `string (`[bytes](https://developers.google.com/discovery/v1/type-format)` format)` The digest of an executable in SHA256 format. The API supports both binary and hex digests. For JSON requests, digests are base64-encoded. A base64-encoded string. |"]]
