# Malware & File Threat Intelligence API

> Extract behaviour indicators, cluster artifacts, analyze executable metadata, detect macro/document risk, extension mismatches, suspicious script patterns, archive payload risks, and IoCs—using local static parsing of caller-supplied files and analysis reports only.

- Product: https://www.brainiac.software/api/file-security
- Docs: https://www.brainiac.software/api/file-security/docs
- OpenAPI: https://www.brainiac.software/api/file-security/openapi.json
- Contact: support@brainiac.software (https://www.brainiac.software/contact)

## Operations

- POST /api/v1/file-security/file-behavior-indicator-extract — $0.04 USDC — Extract file behaviour indicators: Extract suspicious behaviour indicators from caller-supplied analysis reports/text using local static pattern matching. Files are never executed. Absence of matches is not a malware-free verdict. Docs: https://www.brainiac.software/api/file-security/docs#file-security-file-behavior-indicator-extract
- POST /api/v1/file-security/malware-artifact-cluster — $0.04 USDC — Cluster malware artifacts: Group caller-supplied files/artifacts by identical hashes and structural similarity (magic/extension/size). Clustering is not family attribution or confirmed malware. Docs: https://www.brainiac.software/api/file-security/docs#file-security-malware-artifact-cluster
- POST /api/v1/file-security/executable-metadata-analyze — $0.04 USDC — Analyze executable metadata: Analyze PE/ELF/Mach-O metadata and structural properties from caller-supplied bytes. Static only—files are never executed. Docs: https://www.brainiac.software/api/file-security/docs#file-security-executable-metadata-analyze
- POST /api/v1/file-security/macro-document-risk-detect — $0.04 USDC — Detect macro document risk: Identify suspicious macro markers in caller-supplied Office/RTF documents via static strings/package entries. Macros are never executed. Docs: https://www.brainiac.software/api/file-security/docs#file-security-macro-document-risk-detect
- POST /api/v1/file-security/file-extension-mismatch-detect — $0.03 USDC — Detect extension/format mismatches: Identify mismatches between caller-supplied filenames/extensions and local magic-byte formats, including double extensions. Docs: https://www.brainiac.software/api/file-security/docs#file-security-file-extension-mismatch-detect
- POST /api/v1/file-security/suspicious-script-pattern-detect — $0.04 USDC — Detect suspicious script patterns: Analyze caller-supplied scripts for suspicious static patterns (encoded commands, download cradles, obfuscation). Scripts are never executed. Docs: https://www.brainiac.software/api/file-security/docs#file-security-suspicious-script-pattern-detect
- POST /api/v1/file-security/archive-payload-risk-detect — $0.05 USDC — Detect archive payload risk: Inspect caller-supplied archives for nested members and risky file types with strict depth/size/decompression limits. Contents are never executed or uploaded to scanners. Docs: https://www.brainiac.software/api/file-security/docs#file-security-archive-payload-risk-detect
- POST /api/v1/file-security/malware-indicator-extract — $0.04 USDC — Extract malware indicators: Extract IPs, domains, URLs, hashes, and emails from caller-supplied files/reports using local static parsing. Extracted strings are not live threat-intel verdicts. Docs: https://www.brainiac.software/api/file-security/docs#file-security-malware-indicator-extract