Intezer SDK
The SDK wraps the Intezer Platform API 2.0 (full HTTP API documentation).
📖 Full documentation: https://intezer-python-sdk.readthedocs.io/
What you can do with the SDK:
- Analyze files, URLs and endpoint scans
- Send and retrieve alerts (raw and phishing emails)
- Inspect incidents and cases (devices, users, TTPs)
- Search analyses, alerts, incidents, cases and devices history
- Index files as trusted or malicious and look up genetic families
- Get code reuse, metadata, IOCs, dynamic TTPs, capabilities and related samples
Installation
pip install intezer-sdk
The SDK requires CPython 3.10 or newer.
Quick start
Configure the global API once, then use any SDK class:
from intezer_sdk import api
from intezer_sdk.analysis import FileAnalysis
api.set_global_api('<api_key>')
analysis = FileAnalysis(file_path='/path/to/sample')
analysis.send(wait=True)
print(analysis.result())
The API key can also be read from the INTEZER_ANALYZE_API_KEY environment
variable. See the Getting started guide
for US region, on-premise, and multi-tenant setups.
A taste of the SDK
# Analyze a URL
from intezer_sdk.analysis import UrlAnalysis
analysis = UrlAnalysis(url='https://example.com/suspicious')
analysis.send(wait=True)
# Fetch an alert and its scans
from intezer_sdk.alerts import Alert
alert = Alert.from_id(alert_id='<alert_id>', wait=True, fetch_scans=True)
print(alert.verdict, alert.family_name)
# Look up a case
from intezer_sdk.cases import Case
case = Case.from_id(case_id='<case_id>')
print(case.case_title, case.case_status, case.case_priority)
For the full set of examples — wait patterns, sub-analyses, alert ingestion, incident and case search, indexing, history queries, on-premise setup — see the hosted documentation.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file intezer_sdk-1.27.7.tar.gz.
File metadata
- Download URL: intezer_sdk-1.27.7.tar.gz
- Upload date:
- Size: 54.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.2.0 CPython/3.9.25
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
d9d83cd4fa5bc23cc11c83f102d00f88ba6f94fdd8cb9be47a6000eb338b331e
|
|
| MD5 |
936df1c23d078b01265c716f72b608fa
|
|
| BLAKE2b-256 |
d15f572ab4cb68e0aea912867b4abf1fa18dab2d8371640b618553a9ff647321
|
File details
Details for the file intezer_sdk-1.27.7-py3-none-any.whl.
File metadata
- Download URL: intezer_sdk-1.27.7-py3-none-any.whl
- Upload date:
- Size: 65.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.2.0 CPython/3.9.25
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
dbdb664a83dea597c35c01ffe597ecdd42c484574291207a67cd9a653bac9433
|
|
| MD5 |
7c73707bf4021467107ca02602bc65cb
|
|
| BLAKE2b-256 |
4bf34a9d2cd621ff3f1036cf47e02788219a39e3d0d809ab5ff352140f504024
|
