Get Collection Related Object IDs - BlinkOps Documentation

Get the descriptors (type and ID) of the objects related to a collection, such as its threat actors, campaigns, malware families, files, domains, URLs, IP addresses, or MITRE ATT&CK techniques. Note: To get the related objects with all their attributes, use the Get Collection Related Objects action. Note: Threat actors, malware families, software and toolkits, campaigns, vulnerabilities, and reports are only available with a Google Threat Intelligence Enterprise or Enterprise Plus license.

External DocumentationTo learn more, visit the VirusTotal documentation.

Parameters

Parameter	Description
Cursor	A pagination token that indicates which page the next set of results. When included in the response, this cursor means additional items exist in subsequent pages.
Limit	The maximum number of related objects to get. Values can range from `1` to `40`.
Relationship	The name of the relationship to get the related objects for. For more information about the available relationships, refer to Google Threat Intelligence documentation.
Return All Pages	Automatically fetch all resources, page by page.
Threat ID	The ID of the threat. For example: `threat-actor--bcaaad6f-0597-4b89-b69b-84a6be2b7bc3`, `malware--76feb45b-e63a-5a34-8596-da3ce148e776` or `report--25-10000400`.

Example Output

{
	"data": [
		{
			"type": "collection",
			"id": "threat-actor--bcaaad6f-0597-4b89-b69b-84a6be2b7bc3"
		}
	],
	"meta": {
		"cursor": "CuABChEKBGRhdGUSCQjA1LC"
	},
	"links": {
		"self": "https://www.virustotal.com/api/v3/collections/malware--76feb45b-e63a-5a34-8596-da3ce148e776/relationships/threat_actors",
		"next": "https://www.virustotal.com/api/v3/collections/malware--76feb45b-e63a-5a34-8596-da3ce148e776/relationships/threat_actors?cursor=CuABChEKBGRhdGUSCQjA1LC"
	}
}

Workflow Library Example

Get Collection Related Object Ids with Virustotal and Send Results Via Email

Preview this Workflow on desktop

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example