DRdruva
Threat Intel

Updates existing IOC Set

Allows you to update the details of the existing IOC Sets and also to add new IOCs to IOC Sets.

patch/threatintel/v1/ioc-sets/{iocsetid}

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threatintel/v1/ioc-sets/{iocsetid}
  • Auth
    API key in header Authorization

Path parameters

iocsetidinteger required

Specify the IOC set ID to update the details.

Request body

descriptionstring

IOC Set description.

iocsstring[]

IOCs that needs to be added in IOC set

namestring

Name of the IOC Set.

sourcestring

Source of IOC Set.

Example request

{
  "description": "IOC set decription",
  "iocs": [
    "077eb3024604928da9a5c70c0efefd805819e7da"
  ],
  "name": "Black cat IOCs",
  "source": "IOCs of black cat ramsomware"
}

Response

IOC Set updated successfully.

countAddedinteger

Number of IOCs that got added in IOC set.

countDuplicateinteger

Number of IOCs that were duplicate and not added to IOC set.

countSkippedinteger

Number of IOCs that were invalid and not added to IOC set.

countTotalinteger

Total number of IOCs that were provided by administrator.

iocSetIDinteger

Unique ID of the IOC set.

Example response

{
  "countAdded": 12,
  "countDuplicate": 3,
  "countSkipped": 2,
  "countTotal": 17,
  "iocSetID": 7
}

Changes

No recorded changes to this operation across all 1 revision of this API.