DRdruva
Threat Intel

Creates a new IOC Set

Creates a new IOC Set.

post/threatintel/v1/ioc-sets

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threatintel/v1/ioc-sets
  • Auth
    API key in header Authorization

Request body

descriptionstring

IOC set description.

iocType'hash' | 'ext' required

IOc set type, can be either hash / extension.

iocsstring[] required

IOCs that needs to be added in IOC set.

namestring required

IOC set name

sourcestring

Source of IOC set.

Example request

{
  "description": "IOC set decription",
  "iocType": "hash",
  "iocs": [
    "077eb3024604928da9a5c70c0efefd805819e7da"
  ],
  "name": "Black cat IOCs",
  "source": "IOCs of black cat ramsomware"
}

Response

IOC Set created successfully.

countAddedinteger

Number of IOCs that got added in IOC set.

countDuplicateinteger

Number of IOCs that were duplicate and not added to IOC set.

countSkippedinteger

Number of IOCs that were invalid and not added to IOC set.

countTotalinteger

Total number of IOCs that were provided by administrator.

iocSetIDinteger

Unique ID of the IOC set.

Example response

{
  "countAdded": 12,
  "countDuplicate": 3,
  "countSkipped": 2,
  "countTotal": 17,
  "iocSetID": 7
}

Changes

No recorded changes to this operation across all 1 revision of this API.