Intel Exchange API Reference
Sections
Intel Exchange API Reference
Authentication
Ping
Ping
Get Ping OpenAPI
Administration
Integration Management
STIX Source
Get STIX Source Collection List
Get Collection Details
Get STIX Source List
Get STIX Source Categories List
API Integrations
Get API Feed List
Get Action Configurations
Get API Feed Source Details
Get API Feed Account Details
Get Accounts of an API Feed Integration
Get API Feed Channel Configuration
Get API Feed Action Configuration
Get Risk List for API Feed Integration
RSS Feeds
Get RSS Feed Sources
Get RSS Feed Source Detail
Email Feed Source
Get Email Feed Sources
Get Email Source Details
Get Email Folders
Web Scraper
Get Web Scraper Collections
Webhooks
Get Webhooks
Source Weightage
Get Source Weightage
Tool Integrations
Tool Details
Get Tool Categories
Get Configured Tools
Get Application Details
Get SIEM/SOAR Applications
Update Tool
Get All Available Tools
Tool Accounts
Get Accounts List
Test Connectivity
Actions
Get Action Details
Update Action
Get Action Configurations
Get Rule Actions
Subscriber Management
Subscriber Weightage
Get Subscriber Weightage
Subscriber Report
Get Polling Subscribers Report
Get Inboxing Subscribers Report
Get Subscribers
Update Subscriber Status
Users and Groups
Users
Get Users
Add User
Update User
Get Signed in User Details
Update User Status in Bulk
Get User Details
User Groups
Get User Groups List
Create Group
Get Components List
Update User Group Details
Get User Group Details
Custom Entitites Management
Custom Attributes
Get Custom Attributes List
Create Custom Attribute
Get Custom Attribute Details
Update Custom Attribute
Custom Objects
Get Custom Objects List
Create Custom Object
Get Custom Object Details
Update Custom Object
Custom Kill Chain
Get Custom Kill Chain List
Create Custom Kill Chain
Enrichment Management
Enrichment Policy
Get Enrichment Policies
Get Enrichment Policy Details
Enrichment Tools
Get Enrichment Tool List
Enrichment Details
Get Enriched Objects
Get Enrichment Statistics
Get Enrichment Object Details
Get Enrichment Status
Audit Log Management
Get User Activity Log List
Get Subscriber Log List
Get Configuration Change Log List
Get Configuration Section List
License Management System
Get Tenant Permit Details
Synchronize LMS
Get Resource Details List
Certificate
Get Certificate List
Configuration
Tenant Configuration
Get Tenant Configuration
Get Authentication Configuration
Get Firewall Configuration Details
Get Component Configuration Details
Rate Limit
Get OpenAPI Rate Limit Configuration Details
Get TAXII Rate Limit Configuration Details
Ingestion Service Config
Get Ingestion Service Configuration
TAXII Server Configuration
Get TAXII Configuration Details
System Notifications
Get Feed Source Report
Get Internal Failure Reports
Get API Expiry Report
Custom Scores
Get Custom Scores
Create Custom Score
Update Custom Score
Get Table Layout Configurations
Collection Management
Get Collections List
Create Collection
Update Collection
Tag Management
Get Tags
Create Tags
Bulk Enable/Disable Tags
Quick Add Intel
Create Parse IOCs Task
Get Parse IOCs Task Status
Get Parsed IOCs List
Get Regions List
Get Country Codes List
Get Quick Add Intel History List
Get Quick Add Intel Statistics
Quick Add Intel
Get Quick Add Intel Status
Get Quick Add Intel Relation Objects
Import Intel
Import Intel
Get Source Collections
Create Intel via Open API
Create Intel via Open API
Threat Data
Get Threat Data List
Export
Generate Export File
Get Download Link
Get Export File
Bulk Actions
Bulk Add/Remove Allowed Indicators
Bulk Add/Remove Tags
Bulk Add/Remove Watchlist
Bulk Add Analyst Score
Bulk Add Relation
Bulk Add TLP
Bulk Deprecate/Undeprecate Objects
Bulk Manual Review
Bulk Mark/Unmark False Positive
Bulk Run Rule
Bulk IOC Lookup and Create Intel
Bulk IOC Lookup (Advanced)
Quick Preview
Get Threat Data Object Preview
Miscellaneous
Get IOC Types List
Get Countries List
Get Source Types List
Get Sources List
Get Source Collections List
Saved Search
Get Saved Searches List
Get Saved Search Details
Create Saved Search
Update Saved Search
Delete Saved Search
Pin Saved Search
Remove Pined Saved Search
Update Pinned Saved Search
Threat Data Objects
Basic Details
Get Threat Data Object Details List
Get Threat Data Object Additional Details
Get Kill Chain Phases List
Get Kill Chain Details
Get Published Collections of a Threat Object List
Get Threat Data Object Details in Table View
Get Threat Data Object Sources List
Get Source Details List
Get Object Source Details in List View
Get Object Source Details
Get Source External References List
Add Custom Aliases to Threat Actors
Confidence Score (Risk Score)
Refresh Confidence Score (Risk Score)
Get Key Evidence of Confidence Score (Risk Score)
Custom Attributes
Get Custom Attributes List of Threat Data Object
Relations
Get Relations Overview
Get Relations List
Get Relations List of Threat Data Object
Filter Relations by Source
Enrichment
Get Enriched Threat Data
Actions
Get Actions List
Get Action Statistics
Get Action Overview
Tasks
Get Tasks List in Threat Data Object
Get Task Details
Create Task in Threat Data Object
Update Task
Delete Task
Get Task Overview in Threat Data Object
Create Task in Multiple Objects
Notes
Get Notes List in Threat Data Object
Get Note Details in Threat Data Object
Add Note to Threat Data Object
Update Note
Delete Note
Quick Action
Get Quick Action Details
Perform Action on Threat Data Object
Threat Mailbox
Get Emails List
Get Email Details
Get Attachments List
Download All Threat Mail Attachments
Download Single Threat Mail Attachment
Get Search URL
Update Email Message
Get IOCs Count
Get IOCs Listing
Create Intel from Email
Threat Bulletin
Create Threat Bulletin
Update Threat Bulletin
Get Threat Bulletin List
Get Threat Bulletin Details
Send Email
Get Token to Download Attachment
Download Threat Bulletin Attachment
Get Threat Bulletin Attachments List
RSS Feeds
Get RSS Feed Articles List
Update RSS Feed Article
Get IOCs Listing
Create Intel from RSS Feed
Global Notes
Get Notes List
Get Note Details
Add Note
Update Note
Delete Note
Bulk Note
Threat Investigation
Threat Data
Get Threat Data List
Get Nominal Threat Data List
Get Threat Data Object Details
Enrichment
Analyze Relations
Enrich Nodes
Relationship
Get Possible Relationships List
List Existing Relationships
Publishing
Create Intel
Create Draft
Get Intel History Investigations
Canvas
Get Canvases List
Get Canvas Basic Details
Get Canvas Nodes Details
Sandbox
Get Sandbox Records List
Get Sandbox Record Details
Download Sandbox Record
Get Sandbox Record Report
Email Sandbox Record Details
Delete Sandbox Record
Create Sandbox Record from URL
Create Sandbox Record from File
Get Sandbox Apps List
Get Sandbox App Details
Get Sandbox App Instance List
Get Sandbox App Instance Details
Get Sandbox App Action Configurations
Get Sandbox App Action Details
Sandbox App Test Connectivity
Get Sandbox Record Refresh
Get Sandbox Tool Details
Get S3 File Upload Details
Get Sandbox Action Configurations
Get Threat Data Redirection
Threat Defender Library
Get Threat Defender Content List
Create Threat Defender Content
Delete Threat Defender Content
Get Threat Defender Content
Update Threat Defender Content
Validate Threat Defender Content
Get Checked Files List
Check File
Generate Export Link
Download Export Link
ATT&CK Navigator
ATT&CK Layer
Get ATT&CK Layers List
Get ATT&CK Layer Details
Techniques
Get ATT&CK Techniques List
Get Technique Details
Get Sub-techniques List
Get Sub-technique Details
Get Relation List
Get References
Get Tactics
Get Filters
Get IOC Heat Map
Fang/Defang
Fang/Defang Indicators
Rules
Save Result Set
Get Saved Result Set Data
Get Rules List
Get Rules List with Minimal Details
Get Rule Details
Update Rule
Follow or Unfollow Rule
Get Run Rule
Bulk Action on Rules
Global Tasks
Get Tasks List
Get Task Details
Create Task
Update Task
Delete Task
Get Task Overview in Threat Data Object
Create Task in Multiple Objects
Detailed Submission
Common
Get Vocabulary List
Get Relation List
DRAFT
Create DRAFT Intel
Update DRAFT Intel
Get DRAFT Intel
Discard Draft API
Indicator
Create indicator SDO
Update Indicator SDO
Get Indicator SDO
Get Indicator SDOs List
Delete Indicator SDO
Bulk Delete Indicator SDO
Delete All Indicator SDO
Attack Pattern
Create Attack Pattern SDO
Get Attack Pattern SDOs List
Update Attack Pattern SDO
Get Attack Pattern SDO
Delete Attack Pattern SDO
Bulk Delete Attack Pattern SDO
Delete All Attack Pattern SDO
Malware
Create Malware SDO
Update Malware SDO
Get Malware SDO
Get Malware SDOs List
Delete Malware SDO
Bulk Delete Malware SDO
Delete All Malware SDO
SCOs
Create IPv4-addr SCO
Create IPv6-addr SCO
Create URL SCO
Create Domain Name SCO
Create Email-addr SCO
Create File SCO
Create Mutex SCO
Create Email Message SCO
Create Software SCO
Relationship
Create Relationship SDO
Update Relationship SDO
Get Relationship SDO
Get Relationship SDOs List
Delete Relationship SDO
Bulk Delete Relationship SDOs
Delete All Relationship SDO
Sighting
Create Sighting SDO
Update Sighting SDO
Get Sighting SDO
Get Sighting SDOs List
Delete Sighting SDO
Bulk Delete Sighting SDO
Delete All Sighting SDO
Campaign
Create Campaign SDO
Update Campaign SDO
Get Campaign SDO
Get Campaign SDOs List
Delete Campaign SDO
Bulk Delete Campaign SDO
Delete All Campaign SDO
Course Of Action
Create Course of Action SDO
Update Course of Action SDO
Get Course of Action SDO
Get Course of Action SDOs List
Delete Course of Action SDO
Bulk Delete Course of Action SDO
Delete All Course of Action SDO
Identity
Create Identity SDO
Update Identity SDO
Get Identity SDO
Get Identity SDOs List
Delete Identity SDO
Bulk Delete Identity SDO
Delete All Identity SDO
Location
Create Location SDO
Update Location SDO
Get Location SDO
Get Location SDOs List
Delete Location SDO
Bulk Delete Location SDO
Delete All Location SDO
Infrastructure
Create Infrastructure SDO
Update Infrastructure SDO
Get Infrastructure SDO
Get Infrastructure SDOs List
Delete Infrastructure SDO
Bulk Delete Infrastructure SDO
Delete All Infrastructure SDO
Threat Actor
Create Threat Actor SDO
Update Threat Actor SDO
Get Threat Actor SDO
Get Threat Actor SDOs List
Delete Threat Actor SDO
Bulk Delete Threat Actor SDO
Delete All Threat Actor SDO
Tool
Create Tool SDO
Update Tool SDO
Get Tool SDO
Get Tool SDOs List
Delete Tool SDO
Bulk Delete Tool SDO
Delete All Tool SDO
Vulnerability
Create Vulnerability SDO
Update Vulnerability SDO
Get Vulnerability SDO
Get Vulnerability SDOs List
Delete Vulnerability SDO
Bulk Delete Vulnerability SDO
Delete All Vulnerability SDO
Report
Create Report SDO
Update Report SDO
Get Report SDO
Get Report SDOs List
Delete Report SDO
Bulk Delete Report SDO
Delete All Report SDO
Failure Logs
Download Logs from Notification
Download Logs from Detailed Submission/Threat Bulletin
Clone API for Partial Success
Get Export API
Allowed Indicators
Third-Party Indicators
Search Indicator in Third-Party Repository
Add Third-Party Allowed Indicator to Ignored List
Get Third-Party Ignored Indicators List
Remove Indicator from Third-Party Ignored List
Get Allowed Indicators List
Get Allowed Indicator Details
Get Supported Allowed Indicator Types List
Add Indicators to Allowed List
Update Allowed Indicator
Delete Allowed Indicator
Get Reasons List
Delete Reason
Update Reason
Create Reason
Parse IOC
Bulk Action
Verify Allowed Indicators
Watchlist
Get Watchlist Keywords List
Add Keyword to Watchlist
Update Watchlist
Delete Watchlist
Get Watchlist Feeds
Tags
Get Tags List
Get Tag Details
Create Tag
Update Tag
Delete Tag
Bulk Delete Tags
Status Check
Get Heartbeat
Dashboards
Widgets
Get Widgets List
Get Widget Configurations
Get Widget Data
Delete Widget
Get Dashboards List
Get Dashboard Details
Get Top Level Domain (TLD)
Export Dashboard
Delete Custom Dashboard
Reports
Create Report
Run Report
Get Reports List
Get Report Details
Update Report
Get Report Run Logs List
Get Token to Download File
Get Download File
Delete Report
Search or ask...
Search
Theme switcher