Threat Intel Indicator

Get Threat Intel Indicator

Endpoint to retrieve a single Threat Intel Indicator by ID

post/threat-intel-indicators/{id}/get-item

Request

Path parameters

idstring uuid required

ID of the Threat Intel Indicator to retrieve

Request body

Example request

{
  "select": {
    "projectId": true,
    "feedId": true,
    "feedName": true
  }
}

Response

Successful response

Example response

{
  "data": {
    "projectId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "feedId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "feedName": "Example text value",
    "stixId": "Example text value",
    "indicatorType": "Example text value",
    "indicatorValue": "Example text value",
    "indicatorName": "Example text value",
    "confidence": 42,
    "stixLabels": [
      "item1",
      "item2",
      "item3"
    ],
    "validFrom": "example_value",
    "validUntil": "example_value",
    "revoked": true,
    "version": "example_value",
    "retentionDate": "2023-01-15T12:30:00.000Z"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.