v1

latestOpenAPI 3.0.02026-08-064311,0881.3 MB

threatIntelIngestProducer

Removes indicators by their IDS

Removes indicators by specifying a list of indicator IDs

delete/v1/threatIntel/datastore/indicators

sourcestring required

The source of the indicator ID to match against

indicatorIdsstring[] required

The list of indicator IDs to match against

{
  "source": "Crowdstrike",
  "indicatorIds": [
    "indicator--abcd",
    "indicator--ef012"
  ]
}

Indicators successfully removed