Field list

Field Description
filename Fuzzy file name
filename.exact Exact file name
extension File extension
size File size
sha1 File SHA1 checksum
sha256 File SHA256 checksum
last-updated Last update time in our index
last-modified Last update time on the remote server
content-type Content type as specified by the remote server
ip Remote server IP
host Remote server hostname, or IP if empty
infected true if we detected an infection
infection.engine Infection detection engine name
infection.source Infection detection rule source
infection.author Infection detection rule author
infection.name Infection name
country Location of the remote server
network Name of the remote network
network.asn AS number of the remote network