Parameters
| Parameter | Description |
|---|---|
| Object JSON | The JSON of the object. Note that every object type has different required attributes, use the List Objects action or see ThreatQuotient documentation for more information.For example, creating a new event object: |
| Object Type | The type of the object to create. |
Example Output
{
"total": 650,
"data": [
{
"id": 2,
"type_id": 974,
"status_id": 573,
"class": "<string>",
"hash": "<string>",
"value": "<string>",
"last_detected_at": null,
"expires_at": null,
"expired_at": null,
"expires_needs_calc": "<string>",
"expires_calculated_at": null,
"created_at": "<string>",
"updated_at": "<string>",
"existing": "<string>",
"touched_at": "<string>",
"description": null,
"attributes": [
{
"attribute_id": 512,
"value": "<string>",
"indicator_id": 954,
"id": 574,
"created_at": "<string>",
"updated_at": "<string>",
"name": "<string>",
"attribute": {
"id": 661,
"name": "<string>",
"created_at": "<string>",
"updated_at": "<string>"
},
"sources": [
{
"id": 387,
"reference_id": 898,
"type": "<string>",
"name": "<string>",
"expire_days": null,
"expires_needs_calc": "<string>",
"score": null,
"default_tlp_id": 37,
"created_at": "<string>",
"updated_at": "<string>"
}
]
}
],
"descriptions": [
{
"protected": 492,
"primary": 911,
"source_id": 814,
"tlp_id": 717,
"value": "<string>",
"indicator_id": 779,
"updated_at": "<string>",
"created_at": "<string>",
"id": 158
}
],
"sources": [
{
"id": 197,
"reference_id": 581,
"type": "<string>",
"name": "<string>",
"expire_days": null,
"expires_needs_calc": "<string>",
"score": null,
"default_tlp_id": 8,
"created_at": "<string>",
"updated_at": "<string>"
}
],
"type": {
"id": 400,
"name": "<string>",
"uuid_rules": "<string>",
"case_sensitive": 100,
"class": "<string>",
"score": null,
"wildcard_matching": "<string>",
"casing": null,
"created_at": "<string>",
"updated_at": "<string>"
}
}
]
}
Workflow Library Example
Create Object with Threatquotient and Send Results Via Email