topic Re: Wildfire Get Sample API no longer working in Automation/API Discussions

Wildfire Get Sample API no longer working

lcastro — Thu, 07 Jul 2016 19:52:36 GMT

Some time in the past I used to be able to retreived WF submitted samples using the REST API's get/sample. I am no longer able to do this and I do not see any type of response to indicate what error occurred. I am able to submit samples, get verdicts and reports. Has something changed? If so, please update your documentation. Documentation: https://www.paloaltonetworks.com/documentation/71/wildfire/wf_api/about-the-wildfire-api/wildfire-api-resources#61539

ksteves1 — Fri, 08 Jul 2016 02:08:29 GMT

I tested cloud and get/sample works for me. What is the sample verdict? get/sample will not return benign samples.

lcastro — Fri, 08 Jul 2016 17:15:59 GMT

Yes, the sample has a malicious verdict. I also verified that through a get/verdict call before attempting to retrieve it.

ksteves1 — Tue, 12 Jul 2016 01:35:55 GMT

Is there a download file link in the analysis report for the sample on the wildfire portal?

suggest you log a case for this as it should work if you submitted the sample and its verdict is malware.