> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Indicators

Update one or more individual indicators by IOC ID.

Include only the fields that need to be updated. Omit fields that you want left unchanged.

The following permission is required to run this action:

* `IOC Management`: **Read** and **Write**.

<Note>
  External Documentation

  To learn more, visit the [CrowdStrike documentation](https://falcon.us-2.crowdstrike.com/documentation/page/ed1b4a95/detection-and-prevention-policy-apis#b91e8e8c).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter                  | Description                                                                                                                                                                              |
  | -------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | Comment                    | Leave a comment of the update in CrowdStrike.                                                                                                                                            |
  | Indicators Updated Objects | A list of indicator objects with the fields and new values to update in each indicator. <br />Include only the fields that need to be updated. Omit fields that you want left unchanged. |
</div>

## Example Output

```json theme={"dark"}
{
	"errors": [
		{
			"code": 0,
			"id": "string",
			"message": "string"
		}
	],
	"meta": {
		"pagination": {
			"after": "string",
			"limit": 0,
			"offset": 0,
			"total": 0
		},
		"powered_by": "string",
		"query_time": 0,
		"trace_id": "string"
	},
	"resources": [
		{
			"action": "string",
			"applied_globally": false,
			"created_by": "string",
			"created_on": "date-time",
			"deleted": false,
			"description": "string",
			"expiration": "date-time",
			"expired": false,
			"from_parent": false,
			"host_groups": [
				"string"
			],
			"id": "string",
			"metadata": {
				"av_hits": 0,
				"company_name": "string",
				"file_description": "string",
				"file_version": "string",
				"filename": "string",
				"original_filename": "string",
				"product_name": "string",
				"product_version": "string",
				"signed": false
			},
			"mobile_action": "string",
			"modified_by": "string",
			"modified_on": "date-time",
			"parent_cid_name": "string",
			"platforms": [
				"string"
			],
			"severity": "string",
			"source": "string",
			"tags": [
				"string"
			],
			"type": "string",
			"value": "string"
		}
	]
}
```

## Workflow Library Example

[Update Indicators with Crowdstrike and Send Results Via Email](https://library.blinkops.com/workflows/update-indicators-with-crowdstrike-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/update-indicators-with-crowdstrike-and-send-results-via-email/canvas" />
</div>