---
title: "# Create Custom Detection Content"
method: POST
path: "/v1/mitigation/detection-content/custom"
tags: ["Mitigation"]
---

# # Create Custom Detection Content

`POST /v1/mitigation/detection-content/custom`

Creates custom detection content items for the account.

## Request body

- object
  - `items` CustomDetectionContentParams[], required — List of custom detection content items to create. Minimum 1 item, maximum 20 items per request.
    - `action_ids` integer[]
    - `author` string
    - `content_name` string
    - `content_sources` CustomDetectionSourceParams[]
      - `content_policies` string[]
      - `device_name` string
      - `event_id` integer[]
      - `query` string
      - `severity` string
    - `description` string
    - `false_positives` string[]
    - `products` string
    - `references` string[]
    - `release_date` integer — Release date of the detection content, as a Unix timestamp in milliseconds. If omitted, the current server time is used.
    - `service` string
    - `status` string
    - `sub_techniques` string[]
    - `tactics` string[]
    - `techniques` string[]

## Response `200`

CreateCustomDetectionContentResponse

- CreateCustomDetectionContentInternalResponse
  - `created` CreatedCustomDetectionContentItem[]
    - `content_id` string

## Other responses

- `422` — validationErrorSwagger is represents the erroneous cases
- `default` — genericErrorSwagger is represents the erroneous cases

---

[API](https://skmtc.net/picussecurity/apis/picus-rest-api.md) · [All operations](https://skmtc.net/picussecurity/apis/picus-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/picussecurity/picus-rest-api/versions/cb0d02ee28f8/schema)