Skip to main content
Update one or more individual indicators by IOC ID. Include only the fields that need to be updated. Omit fields that you want left unchanged. The following permission is required to run this action:
  • IOC Management: Read and Write.
External DocumentationTo learn more, visit the CrowdStrike documentation.

Basic Parameters

Advanced Parameters

Example Output

Workflow Library Example

Update Indicators with Crowdstrike and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop