Question

A SOC analyst runs the following Python snippet to pull threat indicators from a vendor's REST API, but only the first 50 indicators are ever returned even though the vendor confirms thousands exist:

```python
import requests
resp = requests.get('https://api.vendor.com/v2/indicators', headers=HEADERS)
data = resp.json()
for ind in data['results']:
    process(ind)
```

The API documentation states responses include a top-level 'next' field containing the URL of the next page of results (or null when no more pages remain). Which modification will correctly retrieve ALL indicators?

Accepted Answer

Wrap the existing request in a while loop that follows the 'next' URL until it is null, processing each page's 'results' on every iteration.

Answer

Add a 'limit=10000' query parameter to the URL so the API returns every indicator in a single response.

Answer

Change requests.get to requests.post so the server returns the full dataset instead of a paged subset.

Answer

Add time.sleep(5) after the request so the server has enough time to include all results in the response body.