Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
External Reference → Search
AI-generatedSummary
Search external references matching a term, optionally limited by count.
Inputs
- searchTerm (required) — Term to search for in external references.
- limit (required) — Maximum number of results to return (1‑500).
Output shape
Array of ExternalReference objects
Each result includes the reference's ID, type, and other metadata; results are not paginated.
Examples
Example 1: Find references related to a specific threat actor
searchTerm: "threat actor", limit: 10
Example 2: Retrieve the first 50 default results for a generic query
searchTerm: "ransomware", limit: 50
Example 3: Search with maximum allowed limit
searchTerm: "malware", limit: 500