Skip to main content
Find infection records by computer hostname — useful when investigating fleet-wide exposure with an asset inventory of known device names.

​
Request

POST /v1/search/pc-name · Required scope: search:stealer (all tiers)
ParameterTypeRequiredDefaultDescription
pc_namesstring[]Yes—Computer names to search, min 1 item. Lowercased automatically before matching, e.g. ["DESKTOP-3ESCSGH"]
start_datestring (date-time) | nullNo—Inclusive start filter, clamped by query_window_days
end_datestring (date-time) | nullNo—Inclusive end filter
sort_directionasc | descNodescMust stay constant across pages
cursorstring | nullNo—Pagination token
limitintegerNo251–500, clamped to your tier’s max_rows

​
Example request

curl -X POST https://api.vantaprism.me/v1/search/pc-name \
  -H "api-key: $VANTAPRISM_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "pc_names": ["DESKTOP-3ESCSGH"], "limit": 25 }'

​
Response

200 OK — array of PCNameExposureResult, cursor-paginated. 
{
  "data": [
    {
      "stealer_id": "RL-2026-AC91F3",
      "victim_id": "a3f1c9e8b2d4567890abcdef1234567890abcdef1234567890abcdef123456",
      "computer_name": "DESKTOP-3ESCSGH",
      "ip": "203.0.x.x",
      "country": "US",
      "operating_system": "Windows 11 Pro",
      "stealer_family": "RedLine",
      "hwid": "A1*************",
      "user_name": "jd**",
      "machine_id": "8F*************",
      "malware_location": "C:\\***",
      "infection_date": "2026-05-02T14:22:31Z"
    }
  ],
  "nextCursor": null,
  "meta": {
    "request_id": "req_01HZXK3Q7N8YV6F3M2P9JABCDE",
    "took_ms": 25.4,
    "tier": "free",
    "masked_fields": ["ip", "hwid", "user_name", "machine_id", "malware_location"]
  }
}
FieldDescription
stealer_idlog_victim_id of the infected machine
victim_idSHA-256 victim ID — use with Victim Profiles
computer_nameReturned unmasked — exactly matches a value you searched for in pc_names
ipMasked via subnet_mask on free tier
countryISO 3166-1 alpha-2
operating_system
stealer_family
hwid / user_name / machine_idMasked via partial_identifier on free tier
malware_locationMasked via partial_filepath on free tier
infection_dateWhen the log was captured

​
Pagination

Cursor-paginated — see Pagination.

​
Errors

StatuscodeCause
400VALIDATION_ERRORpc_names is empty or exceeds limits
400INVALID_CURSORTampered or stale cursor
403FORBIDDEN_SCOPEKey lacks search:stealer
See Errors for the full catalog.