Create a new object.

​
Parameters

ParameterDescription
Object JSONThe JSON of the object.
Note that every object type has different required attributes, use the List Objects action or see ThreatQuotient documentation for more information.
For example, creating a new event object:
{
"type_id": 1,
"title": "Fwd: for you ????",
"happened_at": "2019-12-18 16:57:00",
"description": "This Event was observed when..."
}
Object TypeThe type of the object to create.

​
Example Output

{
	"total": 650,
	"data": [
		{
			"id": 2,
			"type_id": 974,
			"status_id": 573,
			"class": "<string>",
			"hash": "<string>",
			"value": "<string>",
			"last_detected_at": null,
			"expires_at": null,
			"expired_at": null,
			"expires_needs_calc": "<string>",
			"expires_calculated_at": null,
			"created_at": "<string>",
			"updated_at": "<string>",
			"existing": "<string>",
			"touched_at": "<string>",
			"description": null,
			"attributes": [
				{
					"attribute_id": 512,
					"value": "<string>",
					"indicator_id": 954,
					"id": 574,
					"created_at": "<string>",
					"updated_at": "<string>",
					"name": "<string>",
					"attribute": {
						"id": 661,
						"name": "<string>",
						"created_at": "<string>",
						"updated_at": "<string>"
					},
					"sources": [
						{
							"id": 387,
							"reference_id": 898,
							"type": "<string>",
							"name": "<string>",
							"expire_days": null,
							"expires_needs_calc": "<string>",
							"score": null,
							"default_tlp_id": 37,
							"created_at": "<string>",
							"updated_at": "<string>"
						}
					]
				}
			],
			"descriptions": [
				{
					"protected": 492,
					"primary": 911,
					"source_id": 814,
					"tlp_id": 717,
					"value": "<string>",
					"indicator_id": 779,
					"updated_at": "<string>",
					"created_at": "<string>",
					"id": 158
				}
			],
			"sources": [
				{
					"id": 197,
					"reference_id": 581,
					"type": "<string>",
					"name": "<string>",
					"expire_days": null,
					"expires_needs_calc": "<string>",
					"score": null,
					"default_tlp_id": 8,
					"created_at": "<string>",
					"updated_at": "<string>"
				}
			],
			"type": {
				"id": 400,
				"name": "<string>",
				"uuid_rules": "<string>",
				"case_sensitive": 100,
				"class": "<string>",
				"score": null,
				"wildcard_matching": "<string>",
				"casing": null,
				"created_at": "<string>",
				"updated_at": "<string>"
			}
		}
	]
}

​
Workflow Library Example

Create Object with Threatquotient and Send Results Via Email

Preview this Workflow on desktop