---
title: "# Import Threat Pack"
method: POST
path: "/v1/threat-library/threats/import"
tags: ["Threats"]
---

# # Import Threat Pack

`POST /v1/threat-library/threats/import`

Imports a threat pack from a YAML file or an encrypted zip archive containing
a YAML definition and optional payload files. Returns the created threat details.
For detailed information on how to construct the threat file, please refer to the guide
at https://support.picussecurity.com/hc/en-us/articles/36765648951837.

## Response `200`

ImportThreatPackReturnResponse

- object
  - `action_count` integer — Number of actions imported
  - `attack_module` string — Attack module of the imported threat
  - `campaign_id` integer — The ID of the created threat
  - `category_names` string[] — Category names of imported actions
  - `filename` string — Name of the YAML file that was imported

## Other responses

- `422` — validationErrorSwagger is represents the erroneous cases
- `default` — genericErrorSwagger is represents the erroneous cases

---

[API](https://skmtc.net/picussecurity/apis/picus-rest-api.md) · [All operations](https://skmtc.net/picussecurity/apis/picus-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/picussecurity/picus-rest-api/revisions/cb0d02ee28f8/schema)