Sign in

v1

latestOpenAPI 3.0.02026-07-141,4077,1665.2 MB
Security Monitoring

Create or update an indicator triage state

Set the triage state of an indicator of compromise (IoC). This creates or updates the triage state for the indicator in your organization.

post/api/v2/security/siem/ioc-explorer/triage

Request body

Example request

{
  "data": {
    "attributes": {
      "indicator": "192.0.2.1",
      "triage_state": "not_reviewed"
    },
    "type": "ioc_triage_state"
  }
}

Response

Created

Example response

{
  "data": {
    "attributes": {
      "triage_state": "not_reviewed"
    }
  }
}