> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Add To Block List

Add threats that have a SHA1 hash and that match the filter to the Blocklist of the target scope: Global, Account, Site, or Group.
Your role must have permissions to change the Blocklist - Admin, IR Team, SOC - and your user scope access must include the Agent.

## Parameters

<div className="integrations-table">
  | Parameter    | Description                               |
  | ------------ | ----------------------------------------- |
  | Agents IDs   | List of agents IDs to filter by.          |
  | Target Scope | Scope to be used for Restrictions.        |
  | Threats IDs  | List of threats IDs to add to exclusions. |
</div>

## Example Output

```json theme={"dark"}
{
	"errors": [
		{
			"type": "object"
		}
	],
	"data": {
		"affected": "integer",
		"details": [
			{
				"analystVerdict": "updated",
				"result": "created",
				"threatId": "225494730938493804"
			}
		]
	}
}
```

## Workflow Library Example

[Add to Block List with Sentinelone and Send Results Via Email](https://library.blinkops.com/workflows/add-to-block-list-with-sentinelone-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/add-to-block-list-with-sentinelone-and-send-results-via-email/canvas" />
</div>