v1

latestOpenAPI 3.0.02026-08-064311,0881.3 MB
threatIntelIngestProducer

Uploads indicators in a Sumo normalized format.

Uploads a list indicators in a Sumo normalized format.

post/v1/threatIntel/datastore/indicators/normalized

Request body

Example request

{
  "indicators": [
    {
      "id": "indicator--d81f86b9-975b-4c0b-875e-810c5ad45a4f",
      "indicator": "182.158.1.1",
      "type": "ipv4-addr",
      "source": "FreeTAXII",
      "updated": "2023-03-21T12:00:00Z",
      "validFrom": "2023-03-21T12:00:00Z",
      "validUntil": "2023-03-21T12:00:00Z",
      "threatType": "benign",
      "actors": "actor1,actor2",
      "killChain": "KC1,KC2"
    }
  ]
}

Response

Normalized indicators successfully uploaded.