Get file analysis details
Files
Get File Analysis
Retrieve comprehensive analysis results and risk assessment for a specific file.
GET
Get file analysis details
Retrieve comprehensive analysis results for a specific file, including signed download URLs for the original file, thumbnail, PDF analysis report, and detailed logs. The file must belong to a case owned by the authenticated user.
Analysis Engines
The Veridox platform runs multiple analysis engines to provide a complete forensic view:- Context Analysis: Extracts metadata and classifies the document type.
- Image Metadata: Analyses EXIF/JFIF data for indicators of tampering or source verification.
- Tampering Detection: Uses advanced computer vision to identify pixel-level anomalies and digital edits.
- AI Summary: Provides a high-level, human-readable summary of the combined findings.
Highlights
Thehighlights field contains a plain list of key findings summarising the most significant indicators from the analysis. It is omitted from the response when the analysis did not produce any highlights.
Module Evidence
Each module infull_analysis.modules reports its findings together with the evidence supporting them:
findings— structured findings, each with analert_type, aseverity(Informational,Low,Medium, orHigh), adescription, aseverity_justification, anevidencelist, andevidence_refs.search_evidence(object ornull) — the search and grounding queries run for the module, with theirresultsand anyfailures.verification_evidence(object ornull) — reserved for registry verification checks; currently alwaysnull.
evidence_refs are IDs that resolve back into the module’s evidence: IDs like q1.0 match a result_id in search_evidence.results, and IDs like v1 match a check_id in verification_evidence.checks. The top-level full_analysis.search_evidence_summary is a cross-module roll-up of the same queries and results, keyed by module_id.
search_evidence_summary and a query’s answer field may be null, and are absent on analyses produced before these fields existed. Treat both as optional.Best Practices
- URL Expiration: Download URLs for assets (original file, PDF report, logs) are time-limited for security. Ensure you download or display them promptly after retrieval.
- Wait for Completion: This endpoint provides the most value after a file’s
analysis_statushas reachedsettled. - Security: Never expose the signed download URLs in client-side code or public environments.
Authorizations
Path Parameters
File ID
Response
File analysis retrieved successfully
Pattern:
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-7[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$Pattern:
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-7[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$Pattern:
^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$Available options:
waiting_for_upload, processing, settled Available options:
success, failed Pattern:
^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$Pattern:
^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$Pattern:
^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$Pattern:
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$