/
TH
threatconnect
Search skmtc…
⌘K
Docs
Sign in
Docs
History
Schema
Generate
Filter operations
Artifact Types
5
Artifacts
9
Attribute Types
5
Case Attributes
8
Cases
9
Exclusion List
8
Group Attributes
8
Groups
13
Indicator Attributes
8
Indicators
11
get
/v3/indicators/{uniqueId}
Retrieve Indicator by ID
put
/v3/indicators/{uniqueId}
Update Indicator by ID
delete
/v3/indicators/{uniqueId}
Delete Indicator by ID
post
/v3/indicators/enrich
Enrich Indicators
post
/v3/indicators/{uniqueId}/enrich
Enrich Indicator
get
/v3/indicators/deleted
Retrieve Deleted Indicators
get
/v3/indicators
Retrieve Indicators
post
/v3/indicators
Create Indicator
options
/v3/indicators
Retrieve entity info
options
/v3/indicators/fields
Retrieve fields
options
/v3/indicators/tql
Retrieve tql
IntelRequirements
8
IntelRequirementsCategories
5
IntelRequirementsResults
7
IntelRequirementsSubtypes
5
Notes
9
Notifications
3
Owner Roles
5
Owners
5
Posts
9
Security Labels
5
System Roles
5
Tags
8
Tasks
9
User Groups
5
Users
5
Victim Attributes
8
VictimAssets
8
Victims
8
Workflow Events
9
Workflow Templates
9
options
/v3/jobs/fields
Retrieve fields
options
/v3/jobs
Retrieve entity info
options
/v3/jobs/tql
Retrieve tql
options
/v3/job/executions/fields
Retrieve fields
options
/v3/job/executions
Retrieve entity info
options
/v3/job/executions/tql
Retrieve tql
options
/v3/playbooks/fields
Retrieve fields
options
/v3/playbooks
Retrieve entity info
options
/v3/playbooks/tql
Retrieve tql
options
/v3/playbook/executions/fields
Retrieve fields
options
/v3/playbook/executions
Retrieve entity info
options
/v3/playbook/executions/tql
Retrieve tql
Indicators
Copy
Copy Markdown
Copy Markdown
Copying…
Copied
Copy failed
Changes to Enrich Indicator
post
/v3/indicators/{uniqueId}/enrich
Nov 3, 2026
726ab3792601
Revision changes
info
added the optional property
calLastChecked
to the response with the
200
status