Retrieve historical endpoint-level hash observations for a host.

Use this endpoint to see when an IP served a given page body, favicon, or banner, so you can identify changes on a host or pivot to other hosts serving the same content.

You must provide an observation_type and can optionally filter by a specific value using the observation_value parameter. You may also filter by port number.

To use this endpoint, your organization must have access to the Adversary Investigation module.