---
title: "Add Hunting rulesets association to an IoC Collection"
method: POST
path: "/collections/{id}/relationships/hunting_rulesets"
tags: ["Threat Actors, Malware & Tools, Campaigns, IoC Collections"]
---

# Add Hunting rulesets association to an IoC Collection

`POST /collections/{id}/relationships/hunting_rulesets`

## Request

- Base URL: `https://www.virustotal.com/api/v3`
- URL: `https://www.virustotal.com/api/v3/collections/{id}/relationships/hunting_rulesets`
- Auth: none required
- TypeScript: <https://skmtc.dev/virustotal/apis/threat-landscape/docs/collections/:id/relationships/hunting_rulesets/post.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `id` string, required

## Headers

- `x-apikey` string, required

## Request body

- object
  - `data` string, json, required: Livehunt ruleset's descriptors

## Response `200`

200

- object

## Other responses

- `400`: 400

---

[API](https://skmtc.dev/virustotal/apis/threat-landscape.md) - [All operations](https://skmtc.dev/virustotal/apis/threat-landscape/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/threat-landscape/revisions/a15abb3e8389?raw)