InspectedFile
Basic information about an inspected file. Full details can be obtained from InspectedFileDetails.
Properties
Conveys user specified allow-list settting for this file at different time instances using /allow-list API.
Error code corresponding to last inspection of this file. This field will be populated only when there is some error in the last inspection.
Error message corresponding to last inspection of this file. This field will be populated only when there is some error in the last inspection.
Size of the file in bytes.
Type of the file.
Status of the inspection event.
Possible values are: IN_PROGRESS , COMPLETED , ERROR
Number of times this file is inspected.
Conveys if the file is blocked by malware prevention service.
Timestamp in milliseconds since epoch
Class of the malware.
Family of the malware.
MD5 hash of the file.
SHA1 hash of the file.
SHA256 hash of the file.
Threat score in the range of 0 to 100. A score of 100 is considered high potential threat.
This property describes the behavior of the file at runtime. Meanings are described below BENIGN: This is a benign file with no malicious code TRUSTED: This is a TRUSTED file based on the behaviour of the file HIGHLY_TRUSTED: This is a file from a highly trusted source like for e.g microsft published the file SUSPICIOUS: This file contains suspicious code and on execution can turn out to be malware MALICIOUS: This file is a malicious file containing malware or bad code that can harm the system UNKNOWN: This file is not known and hence its behavior is UNKNOWN at this point in time. UNINSPECTED: This file is marked as allowlisted and hence the verdict is UNINSPECTED.
Possible values are: BENIGN , TRUSTED , HIGHLY_TRUSTED , SUSPICIOUS , MALICIOUS , UNKNOWN , UNINSPECTED
JSON Example
{
"allow_listed": {
"current_setting": false,
"last_inspection_setting": false
},
"error_code": "string",
"error_message": "string",
"file_size": 0,
"file_type": "string",
"inspection_status": "IN_PROGRESS",
"inspections_count": 0,
"is_blocked": false,
"last_inspected": 0,
"malware_class": [
"string"
],
"malware_family": [
"string"
],
"md5": "string",
"sha1": "string",
"sha256": "string",
"threat_score": 0,
"verdict": "BENIGN"
}
Property Of
InlineInspectedFilesListResult1
Used By
InspectedFileDetails
