Analyze Indicator - Add to Queue
POST https://pulsedive.com/api/analyze.php?value=pulsedive.com&probe=1&pretty=1
Pulsedive API documentation on scanning indicators can be found here: https://pulsedive.com/api/scan
Overview
You can scan an indicator without submitting.
If you don't want to upload indicators to Pulsedive, you can scan them without submitting. This will perform the same enrichment and risk scoring as if you were submitting, but the data won't be stored. If the indicator is already in the database however, the information will be updated.
You can choose between passive and active scanning.
Passive scans fetch data without reaching out directly to the indicator, including performing WHOIS and DNS requests. Active scans are more noisy; we'll do a quick port scan and reach out to the indicator with a web browser.
Scans are from secondary nodes.
Pulsedive performs scans from hardened secondary nodes that are spread out across the globe.
Add to the Queue
The first step to scanning an indicator is adding the indicator to the queue for processing. We can specify whether we want to perform an active scan for the indicator by setting the probe parameter to 0 for passive or 1 for active.
Request Params
| Key | Datatype | Required | Description |
| value | string | | Indicator value |
| probe | number | | Active scan (1) or passive (0) |
| pretty | number | | Pretty-print JSON response |
HEADERS
| Key | Datatype | Required | Description |
RESPONSES
status: ``