---
title: "Create Victim"
method: POST
path: "/v3/victims"
tags: ["Victims"]
---

# Create Victim

`POST /v3/victims`

Allows the creation of a new Victim

## Query parameters

- `fields` string[]
- `createActivityLog` string

## Request body

- Victim
  - `id` integer
  - `dateAdded` string, date-time
  - `securityLabels` ListEntitySecurityLabel
    - `data` SecurityLabel[]
      - `id` integer
      - `name` string, required
      - `description` string
      - `color` string
      - `owner` string
      - `dateAdded` string, date-time
      - `victims` ListEntityVictim
        - `data` Victim[]
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `attributes` ListEntityAttributeData
        - `data` AttributeData[]
          - `id` integer
          - `dateAdded` string, date-time
          - `securityLabels` ListEntitySecurityLabel — recursive
          - `type` string
          - `value` string, required
          - `source` string
          - `createdBy` User
            - `id` integer
            - `userName` string
            - `firstName` string
            - `lastName` string
            - `pseudonym` string
            - `owner` string
            - `password` string
            - `lastLogin` string, date-time
            - `lastPasswordChange` string, date-time
            - `uiTheme` string
            - `jobFunction` string
            - `jobRole` string
            - `termsAccepted` boolean
            - `termsAcceptedDate` string, date-time
            - `logoutIntervalMinutes` integer
            - `tqlTimeout` integer
            - `systemRole` string
            - `ownerRoles` object
            - `disabled` boolean
            - `locked` boolean
            - `passwordResetRequired` boolean
            - `twoFactorResetRequired` boolean
            - `customTqlTimeout` integer
          - `lastModified` string, date-time
          - `settings` AttributeSettings
            - `id` integer
            - `owner` string
            - `associable` boolean
            - `pinnedByDefault` boolean
            - `message` string
            - `default` boolean
          - `shardId` integer
          - `ownerId` integer
          - `pinned` boolean
          - `default` boolean
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string
  - `ownerId` integer
  - `ownerName` string
  - `webLink` string
  - `tags` ListEntityTag
    - `data` Tag[]
      - `id` integer
      - `name` string, required
      - `owner` string
      - `description` string
      - `lastUsed` string, date-time
      - `techniqueId` string
      - `tactics` ListEntityString
        - `data` string[]
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `platforms` ListEntityString
        - `data` string[]
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `securityCoverage` AttackSecurityCoverage
        - `id` integer
        - `value` string
      - `financialImpact` AttackFinancialImpact
        - `id` integer
        - `risk` string
        - `lastUpdated` string, date-time
      - `normalized` boolean
      - `synonymousTagNames` ListEntityString
        - `data` string[]
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string
  - `name` string, required
  - `description` string
  - `org` string
  - `suborg` string
  - `workLocation` string
  - `nationality` string
  - `assets` ListEntityVictimAsset
    - `data` VictimAsset[]
      - `id` integer
      - `type` string, required
      - `victimId` integer, required
      - `address` string
      - `addressType` string
      - `accountName` string
      - `socialNetwork` string
      - `networkType` string
      - `website` string
      - `phone` string
      - `webLink` string
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string
  - `attributes` ListEntityVictimAttributeData
    - `data` VictimAttributeData[]
      - `id` integer
      - `dateAdded` string, date-time
      - `securityLabels` ListEntitySecurityLabel
        - `data` SecurityLabel[]
          - `id` integer
          - `name` string, required
          - `description` string
          - `color` string
          - `owner` string
          - `dateAdded` string, date-time
          - `victims` ListEntityVictim
            - `data` Victim[]
            - `count` integer
            - `countSuccess` integer
            - `countFailure` integer
            - `count_type` string
            - `next` string
            - `prev` string
            - `mode` string
          - `attributes` ListEntityAttributeData
            - `data` AttributeData[]
              - …
            - `count` integer
            - `countSuccess` integer
            - `countFailure` integer
            - `count_type` string
            - `next` string
            - `prev` string
            - `mode` string
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `type` string
      - `value` string, required
      - `source` string
      - `createdBy` User
        - `id` integer
        - `userName` string
        - `firstName` string
        - `lastName` string
        - `pseudonym` string
        - `owner` string
        - `password` string
        - `lastLogin` string, date-time
        - `lastPasswordChange` string, date-time
        - `uiTheme` string
        - `jobFunction` string
        - `jobRole` string
        - `termsAccepted` boolean
        - `termsAcceptedDate` string, date-time
        - `logoutIntervalMinutes` integer
        - `tqlTimeout` integer
        - `systemRole` string
        - `ownerRoles` object
        - `disabled` boolean
        - `locked` boolean
        - `passwordResetRequired` boolean
        - `twoFactorResetRequired` boolean
        - `customTqlTimeout` integer
      - `lastModified` string, date-time
      - `settings` AttributeSettings
        - `id` integer
        - `owner` string
        - `associable` boolean
        - `pinnedByDefault` boolean
        - `message` string
        - `default` boolean
      - `shardId` integer
      - `ownerId` integer
      - `victimId` integer, required
      - `pinned` boolean
      - `default` boolean
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string

## Response `200`

The new Victim

- Victim
  - `id` integer
  - `dateAdded` string, date-time
  - `securityLabels` ListEntitySecurityLabel
    - `data` SecurityLabel[]
      - `id` integer
      - `name` string, required
      - `description` string
      - `color` string
      - `owner` string
      - `dateAdded` string, date-time
      - `victims` ListEntityVictim
        - `data` Victim[]
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `attributes` ListEntityAttributeData
        - `data` AttributeData[]
          - `id` integer
          - `dateAdded` string, date-time
          - `securityLabels` ListEntitySecurityLabel — recursive
          - `type` string
          - `value` string, required
          - `source` string
          - `createdBy` User
            - `id` integer
            - `userName` string
            - `firstName` string
            - `lastName` string
            - `pseudonym` string
            - `owner` string
            - `password` string
            - `lastLogin` string, date-time
            - `lastPasswordChange` string, date-time
            - `uiTheme` string
            - `jobFunction` string
            - `jobRole` string
            - `termsAccepted` boolean
            - `termsAcceptedDate` string, date-time
            - `logoutIntervalMinutes` integer
            - `tqlTimeout` integer
            - `systemRole` string
            - `ownerRoles` object
            - `disabled` boolean
            - `locked` boolean
            - `passwordResetRequired` boolean
            - `twoFactorResetRequired` boolean
            - `customTqlTimeout` integer
          - `lastModified` string, date-time
          - `settings` AttributeSettings
            - `id` integer
            - `owner` string
            - `associable` boolean
            - `pinnedByDefault` boolean
            - `message` string
            - `default` boolean
          - `shardId` integer
          - `ownerId` integer
          - `pinned` boolean
          - `default` boolean
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string
  - `ownerId` integer
  - `ownerName` string
  - `webLink` string
  - `tags` ListEntityTag
    - `data` Tag[]
      - `id` integer
      - `name` string, required
      - `owner` string
      - `description` string
      - `lastUsed` string, date-time
      - `techniqueId` string
      - `tactics` ListEntityString
        - `data` string[]
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `platforms` ListEntityString
        - `data` string[]
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `securityCoverage` AttackSecurityCoverage
        - `id` integer
        - `value` string
      - `financialImpact` AttackFinancialImpact
        - `id` integer
        - `risk` string
        - `lastUpdated` string, date-time
      - `normalized` boolean
      - `synonymousTagNames` ListEntityString
        - `data` string[]
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string
  - `name` string, required
  - `description` string
  - `org` string
  - `suborg` string
  - `workLocation` string
  - `nationality` string
  - `assets` ListEntityVictimAsset
    - `data` VictimAsset[]
      - `id` integer
      - `type` string, required
      - `victimId` integer, required
      - `address` string
      - `addressType` string
      - `accountName` string
      - `socialNetwork` string
      - `networkType` string
      - `website` string
      - `phone` string
      - `webLink` string
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string
  - `attributes` ListEntityVictimAttributeData
    - `data` VictimAttributeData[]
      - `id` integer
      - `dateAdded` string, date-time
      - `securityLabels` ListEntitySecurityLabel
        - `data` SecurityLabel[]
          - `id` integer
          - `name` string, required
          - `description` string
          - `color` string
          - `owner` string
          - `dateAdded` string, date-time
          - `victims` ListEntityVictim
            - `data` Victim[]
            - `count` integer
            - `countSuccess` integer
            - `countFailure` integer
            - `count_type` string
            - `next` string
            - `prev` string
            - `mode` string
          - `attributes` ListEntityAttributeData
            - `data` AttributeData[]
              - …
            - `count` integer
            - `countSuccess` integer
            - `countFailure` integer
            - `count_type` string
            - `next` string
            - `prev` string
            - `mode` string
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `type` string
      - `value` string, required
      - `source` string
      - `createdBy` User
        - `id` integer
        - `userName` string
        - `firstName` string
        - `lastName` string
        - `pseudonym` string
        - `owner` string
        - `password` string
        - `lastLogin` string, date-time
        - `lastPasswordChange` string, date-time
        - `uiTheme` string
        - `jobFunction` string
        - `jobRole` string
        - `termsAccepted` boolean
        - `termsAcceptedDate` string, date-time
        - `logoutIntervalMinutes` integer
        - `tqlTimeout` integer
        - `systemRole` string
        - `ownerRoles` object
        - `disabled` boolean
        - `locked` boolean
        - `passwordResetRequired` boolean
        - `twoFactorResetRequired` boolean
        - `customTqlTimeout` integer
      - `lastModified` string, date-time
      - `settings` AttributeSettings
        - `id` integer
        - `owner` string
        - `associable` boolean
        - `pinnedByDefault` boolean
        - `message` string
        - `default` boolean
      - `shardId` integer
      - `ownerId` integer
      - `victimId` integer, required
      - `pinned` boolean
      - `default` boolean
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string

---

[API](https://skmtc.net/threatconnect/apis/threatconnect-api.md) · [All operations](https://skmtc.net/threatconnect/apis/threatconnect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/threatconnect/threatconnect-api/revisions/730b8a350ae7/schema)
