Overview
API Concepts Manage API Key
Internet Data
DNSIQ® WHOISIQ™ SSL Certificates Blacklist Lookup Host Attributes
Attack Analytics
Newly Observed Domains Newly Observed Hosts Malware Phishing Scam Content
Digital Footprint
Global Inventory API Global Inventory Schema Risk Metric Schema
Coming Soon
Enrich
PassiveTotal
Getting Started Actions Artifact Articles Attack Surface Intelligence Intel Profiles Data Card Enrichment Services Monitor Project SSL Certificates Tag Artifact Trackers Host Attributes Cookies Components Passive DNS Whois Bulk Enrichment Reputation Vulnerability Intelligence
Additional Resources
Workspace Management API
RiskIQ.com

Risk Metric Schema

Schema last updated at: 2021-10-29

Below you will find schema breakdowns for Risk Metrics based on asset types, including: AS, Contact, Domain, Host, IP Address, IP Block, Page, SSL Cert.

What It Looks Like

See schema structures below for: AS, Contact, Domain, Host, IP Address, IP Block, Page, SSL Cert

AS Risk Metric

Example of the as asset schema returned by the Global Inventory Risk Metric API. Back to top

Schema


{
    "$schema": "http://json-schema.org/draft-04/schema#",
    "type" : "object",
    "required" : {
        "assetID",
        "assetPriority",
        "assetType",
        "uuid",
        "registry",
        "firstSeen",
        "lastSeen",
        "organization",
        "asName",
        "country",
        "name"
    }
    "properties" : {
        "assetID" : {
            "type" : "string"
        },
        "assetPriority" : {
            "type" : "string"
        },
        "assetType" : {
            "type" : "string"
        },
        "uuid" : {
            "type" : "string"
        },
        "registry" : {
            "type" : "string"
        },
        "firstSeen" : {
            "type" : "integer"
        },
        "organization" : {
            "type" : "string"
        },
        "asName" : {
            "type" : "string"
        },
        "tags" : {
            "type" : "array",
            "items" : {
                "type" : "string"
            }
        },
        "lastSeen" : {
            "type" : "integer"
        },
        "country" : {
            "type" : "string"
        },
        "name" : {
            "type" : "string"
        },
        "orgs" : {
            "type" : "array",
            "items" : {
                "type" : "string"
            }
        },
        "brands" : {
            "type" : "array",
            "items" : {
                "type" : "string"
            }
        }
    }
}

Contact Risk Metric

Example of the contact asset schema returned by the Global Inventory Risk Metric API. Back to top

Schema


{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type" : "object",
  "required": [
    "assetID",
    "firstSeen",
    "lastSeen",
    "assetType",
    "name",
    "uuid",
    "assetPriority"
  ],
  "properties" : {
    "tags" : {
      "type" : "array",
      "items" : {
        "type" : "string"
      }
    },
    "brands" : {
      "type" : "array",
      "items" : {
        "type" : "string"
      }
    },
    "firstSeen" : {
      "type" : "integer"
    },
    "assetPriority" : {
      "type" : "string"
    },
    "lastSeen" : {
      "type" : "integer"
    },
    "assetType" : {
      "type" : "string"
    },
    "name" : {
      "type" : "string"
    },
    "uuid" : {
      "type" : "string"
    },
    "orgs" : {
      "type" : "array",
      "items" : {
        "type" : "string"
      }
    },
    "assetID" : {
      "type" : "string"
    }
  }
}

Domain Risk Metric

Example of the domain asset schema returned by the Global Inventory Risk Metric API. Back to top

Schema


{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type" : "object",
  "required": [
    "assetID",
    "firstSeen",
    "lastSeen",
    "assetType",
    "name",
    "uuid",
    "assetPriority",
    "registrar",
    "registrantContact",
    "technicalContact",
    "adminContact",
    "registrantOrg"
  ],
  "properties" : {
    "tags" : {
      "type" : "array",
      "items" : {
        "type" : "string"
      }
    },
    "brands" : {
      "type" : "array",
      "items" : {
        "type" : "string"
      }
    },
    "firstSeen" : {
      "type" : "integer"
    },
    "assetPriority" : {
      "type" : "string"
    },
    "lastSeen" : {
      "type" : "integer"
    },
    "assetType" : {
      "type" : "string"
    },
    "name" : {
      "type" : "string"
    },
    "uuid" : {
      "type" : "string"
    },
    "orgs" : {
      "type" : "array",
      "items" : {
        "type" : "string"
      }
    },
    "assetID" : {
      "type" : "string"
    },
    "registrar" : {
      "type" : "string"
    },
    "registrantContact" : {
      "type" : "string"
    },
    "technicalContact" : {
      "type" : "string"
    },
    "adminContact" : {
      "type" : "string"
    },
    "registrantOrg" : {
      "type" : "string"
    }
  }
}

Host Risk Metric

Example of the host asset schema returned by the Global Inventory Risk Metric API. Back to top

Schema


{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type": "object",
  "required": [
    "assetID",
    "firstSeen",
    "lastSeen",
    "assetType",
    "name",
    "uuid",
    "assetPriority",
    "domain",
    "registrar",
    "registrantOrg",
    "webComponents"
  ],
  "properties": {
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "brands": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "firstSeen": {
      "type": "integer"
    },
    "assetPriority": {
      "type": "string"
    },
    "lastSeen": {
      "type": "integer"
    },
    "assetType": {
      "type": "string"
    },
    "name": {
      "type": "string"
    },
    "uuid": {
      "type": "string"
    },
    "orgs": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "assetID": {
      "type": "string"
    },
    "registrar": {
      "type": "string"
    },
    "domain": {
      "type": "string"
    },
    "registrantOrg": {
      "type": "string"
    },
    "webComponents": {
      "type": "array",
      "items": [
        {
          "type": "object",
          "required": [
            "name"
          ],
          "properties": {
            "name": {
              "type": "string"
            },
            "version": {
              "type": "string"
            },
            "type": {
              "type": "string"
            },
            "nameVersion": {
              "type": "string"
            }
          }
        }
      ]
    }
  }
}

IP Address Risk Metric

Example of the ip address asset schema returned by the Global Inventory Risk Metric API. Back to top

Schema


{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type": "object",
  "required": [
    "assetID",
    "firstSeen",
    "lastSeen",
    "assetType",
    "name",
    "uuid",
    "assetPriority",
    "openPorts",
    "country",
    "asn",
    "ipBlock",
    "webComponents"
  ],
  "properties": {
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "brands": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "firstSeen": {
      "type": "integer"
    },
    "assetPriority": {
      "type": "string"
    },
    "lastSeen": {
      "type": "integer"
    },
    "assetType": {
      "type": "string"
    },
    "name": {
      "type": "string"
    },
    "uuid": {
      "type": "string"
    },
    "orgs": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "assetID": {
      "type": "string"
    },
    "openPorts" : {
      "type" : "array",
      "items" : {
        "type" : "integer"
      }
    },
    "country" : {
      "type" : "string"
    },
    "asn" : {
      "type" : "string"
    },
    "ipBlock" : {
      "type" : "string"
    },
    "webComponents": {
      "type": "array",
      "items": [
        {
          "type": "object",
          "required": [
            "name"
          ],
          "properties": {
            "name": {
              "type": "string"
            },
            "version": {
              "type": "string"
            },
            "type": {
              "type": "string"
            },
            "nameVersion" : {
              "type" : "string"
            }
          }
        }
      ]
    }
  }
}

IP Block Risk Metric

Example of the ip block asset schema returned by the Global Inventory Risk Metric API. Back to top

Schema


{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type": "object",
  "required": [
    "assetID",
    "firstSeen",
    "lastSeen",
    "assetType",
    "name",
    "uuid",
    "assetPriority",
    "country",
    "netName",
    "asn"
  ],
  "properties": {
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "brands": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "firstSeen": {
      "type": "integer"
    },
    "assetPriority": {
      "type": "string"
    },
    "lastSeen": {
      "type": "integer"
    },
    "assetType": {
      "type": "string"
    },
    "name": {
      "type": "string"
    },
    "uuid": {
      "type": "string"
    },
    "orgs": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "assetID": {
      "type": "string"
    },
    "country" : {
      "type" : "string"
    },
    "netName" : {
      "type" : "string"
    },
    "asn" : {
      "type" : "string"
    }
  }
}

Page Risk Metric

Example of the page asset schema returned by the Global Inventory Risk Metric API. Back to top

Schema


{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type": "object",
  "required": [
    "assetID",
    "firstSeen",
    "lastSeen",
    "assetType",
    "name",
    "uuid",
    "assetPriority",
    "domain",
    "registrar",
    "registrantOrg",
    "webComponents"
  ],
  "properties": {
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "brands": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "firstSeen": {
      "type": "integer"
    },
    "assetPriority": {
      "type": "string"
    },
    "lastSeen": {
      "type": "integer"
    },
    "assetType": {
      "type": "string"
    },
    "name": {
      "type": "string"
    },
    "uuid": {
      "type": "string"
    },
    "orgs": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "assetID": {
      "type": "string"
    },
    "registrar": {
      "type": "string"
    },
    "domain": {
      "type": "string"
    },
    "registrantOrg": {
      "type": "string"
    },
    "webComponents": {
      "type": "array",
      "items": [
        {
          "type": "object",
          "required": [
            "name"
          ],
          "properties": {
            "name": {
              "type": "string"
            },
            "version": {
              "type": "string"
            },
            "type": {
              "type": "string"
            },
            "nameVersion" : {
              "type" : "string"
            }
          }
        }
      ]
    }
  }
}

SSl Cert Risk Metric

Example of the ssl cert asset schema returned by the Global Inventory Risk Metric API. Back to top

Schema


{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type": "object",
  "required": [
    "assetID",
    "firstSeen",
    "lastSeen",
    "assetType",
    "name",
    "uuid",
    "assetPriority",
    "notAfter",
    "notBefore",
    "sha1",
    "selfSigned",
    "subjectCommonName",
    "issuerCommonName",
    "subjectOrganization",
    "issuerOrganization"
  ],
  "properties": {
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "brands": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "firstSeen": {
      "type": "integer"
    },
    "assetPriority": {
      "type": "string"
    },
    "lastSeen": {
      "type": "integer"
    },
    "assetType": {
      "type": "string"
    },
    "name": {
      "type": "string"
    },
    "uuid": {
      "type": "string"
    },
    "orgs": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "assetID": {
      "type": "string"
    },
    "notBefore" : {
      "type" : "integer"
    },
    "issuerOrganization" : {
      "type" : "string"
    },
    "subjectOrganization" : {
      "type" : "string"
    },
    "subjectCommonName" : {
      "type" : "string"
    },
    "sha1" : {
      "type" : "string"
    },
    "notAfter" : {
      "type" : "integer"
    },
    "issuerCommonName" : {
      "type" : "string"
    },
    "selfSigned" : {
      "type" : "boolean"
    }
  }
}