$0.05
per call · USD Coin on Base
ICS detection artifact retrieval. Pass ?target=PIPEDREAM or ?target=SANDWORM&format=sigma. Returns YARA/Sigma rules for the target malware or actor, sourced from public corpus (Florian Roth signature-base, CISA advisories) with validated:true, or DeepSeek-synthesised with validated:false. Designed for automated threat hunting pipelines that commit rules to SIEMs and EDRs — validated:true rules are safe to deploy; validated:false require lab testing first.
Endpoint
GET https://ot-intel-api.onrender.com/ot/detection1
Calls / 30d
1
Unique payers / 30d
Aug 25
Last called
exact
Payment scheme
Call this service
import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";
const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);
const res = await fetchWithPay("https://ot-intel-api.onrender.com/ot/detection", {
method: "GET",
});
const data = await res.json();curl -X GET \
"https://ot-intel-api.onrender.com/ot/detection?target=PIPEDREAM" \
-H "X-PAYMENT: <signed x402 payment>"Example response
{
"artifact_type": "malware",
"data_sources": [
"OT-Intel-DB",
"DeepSeek-CTI-Analysis"
],
"freshness": "2026-06-19T10:00:00Z",
"ot_safe_validation": "0 of 1 rules sourced from public corpus. Rules with validated:false require lab testing before production deployment.",
"signatures": [
{
"ot_safe_note": "Synthesised from CISA advisory AA22-103A. Test against OT baseline before SIEM deployment.",
"raw_rule": "rule PIPEDREAM_INCONTROLLER_Loader { meta: ... strings: ... condition: ... }",
"rule_name": "PIPEDREAM_INCONTROLLER_Loader",
"source": "manual",
"target_layer": "engineering_workstation",
"type": "YARA",
"validated": false
}
],
"synthesised_count": 1,
"target": "PIPEDREAM",
"validated_count": 0
}Payment details
0x1888192fac6a69e4cd7d078ec4bcf6f24f7c767bUSD Coin · 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913Is this your API?
Pin it to the top of Other and the homepage with a featured placement.
More from Onrender & similar services
Onrender · Signals
quotient-api-gateway.onrender.com
Use this to scan Quotient's published prediction-market signals on Polymarket International, Polymarket US, Kalshi, and Limitless: side, entry YES price, latest Q probability and thesis, conviction, the forecast_status gauge with its standing adverse move, upside to Q, and capacity — one signal per market. A signal is active or retired; a missing live quote drops a row from the feed, and a caution/warning forecast_status marks an adverse move, never hides the row.
Onrender · Markets Search
quotient-api-gateway.onrender.com
Use this to search Quotient-covered markets by meaning, taxonomy, asset, venue, or historical cutoff. Results carry quote provenance plus Q and venue odds captured at the selected forecast. Polymarket International and Kalshi use verified live pricing or null; other venues label graph snapshots stale. Use as_of for discovery and the forecast-time pair for historical spreads, including since-closed markets.
Onrender · Markets Lookup
quotient-api-gateway.onrender.com
Use this to fetch full Quotient intelligence for up to ten markets across Polymarket International, Polymarket US, Kalshi, and Limitless. Returns forecasts, theses, cited drivers, resolution pathways, venue odds, and quote provenance. Polymarket International and Kalshi fail closed when live pricing is unavailable. Prefer market_keys; legacy slugs and condition IDs default to Polymarket unless venue is supplied.