THthreatconnect
Indicators

Enrich Indicator

Changed on

Enriches the selected indicator with 3rd-Party information

post/v3/indicators/{uniqueId}/enrich

Request

  • Base URL
    https://app.threatconnect.com/api
  • URL
    https://app.threatconnect.com/api/v3/indicators/{uniqueId}/enrich
  • Auth
    API key in header Authorization

Path parameters

uniqueIdstring required

Query parameters

typestring[]
countstring
fieldsstring[]

Request body

dataobject

Response

The Indicator

idinteger
dateAddedstring date-time
ownerIdinteger
ownerNamestring
webLinkstring
typestring required
lastModifiedstring date-time
externalDateAddedstring date-time
externalLastModifiedstring date-time
externalDateExpiresstring date-time
firstSeenstring date-time
lastSeenstring date-time
ratingnumber
confidenceinteger
threatAssessRatingnumber double
threatAssessConfidencenumber double
threatAssessScoreinteger
threatAssessScoreObservedinteger
threatAssessScoreFalsePositiveinteger
calScoreinteger
calLastCheckedstring date-time
sourcestring
descriptionstring
summarystring
observationsinteger
lastObservedstring date-time
falsePositivesinteger
lastFalsePositivestring date-time
falsePositiveReportedByUserboolean
falsePositiveFlagboolean
trackedUsersobject
privateFlagboolean
activeboolean
activeLockedboolean
value1string
value2string
value3string
flag1boolean
flag2boolean
flag3boolean
intValue1integer
intValue2integer
intValue3integer
addressstring
md5string
sha1string
sha256string
sizeinteger
modestring
ipstring
hostNamestring
dnsActiveboolean
whoisActiveboolean
textstring
legacyLinkstring

Changes