Ics Detection Artifact Retrieval API
ICS detection artifact retrieval. Pass ?target=PIPEDREAM or ?target=SANDWORM&format=sigma. Returns YARA/Sigma rules for the target malware or actor, sourced from public corpus (Florian Roth signature-base, CISA advisories) with validated:true, or DeepSeek-synthesised with validated:false. Designed for automated threat hunting pipelines that commit rules to SIEMs and EDRs — validated:true rules are safe to deploy; validated:false require lab testing first.
Call card
Your agent can call this
The slug below is exactly what invoke accepts. Addendpoint (a route_cards[].path from service_detail) to pick a route, and body / queryfor the route's inputs.
Reliability
Daily probe success ratio, last 30 days. Last probed 2026-08-25 (last probe failed).
Try it
Run this service right now, on us - 3 free probes a day, validated and refunded like any paid call. Query params optional.