# Spectra Intelligence File Threat Intelligence API Overview

> Query file reputation, retrieve multi-AV scan results, and get detailed malware analysis reports by hash using Spectra Intelligence tca-0101 through tca-0105.



The File Threat Intelligence APIs help security teams assess file reputation, retrieve detailed analysis reports, and manage classification overrides for files in the Spectra Intelligence system.

## Common Use Cases

### Check if a file is malicious

- **[File reputation (TCA-0101)](tca-0101.md)** - Get malware status (malicious, suspicious, known, unknown) with threat level, trust factor, and malware family details. Supports bulk queries.
- **[File reputation override (TCA-0102)](tca-0102.md)** - Override file classifications within your organization to handle false positives or flag internal threats.

### Get detailed file analysis

- **[File analysis (TCA-0104)](tca-0104.md)** - Retrieve comprehensive analysis results for a submitted sample, including file hashes, metadata, relationships, and source history. Depending on availability, the response may include static and dynamic analysis findings, multi-AV detections, behavioral indicators, certificates, and URLs or other artifacts extracted from images or QR codes.
- **[File analysis (goodware) (TCA-0105)](tca-0105.md)** - Get analysis data for known-good files only, with trust factor and relationships.

### Review AV scan history

- **[Historic multi-AV scan records (TCA-0103)](tca-0103.md)** - Retrieve current and historical multi-AV scan reports showing detection changes over time.

## All File Threat Intelligence APIs


