Skip to main content
PATCH
/
v1
/
indicators
/
{indicator_uuid}
Patch Indicator
curl --request PATCH \
  --url https://api.example.com/v1/indicators/{indicator_uuid} \
  --header 'Content-Type: application/json' \
  --data '
{
  "malice": "Pending"
}
'
{
  "data": {
    "uuid": "<string>",
    "type": "ip",
    "value": "<string>",
    "malice": "<string>",
    "first_seen": "2023-11-07T05:31:56Z",
    "last_seen": "2023-11-07T05:31:56Z",
    "is_enriched": true,
    "created_at": "2023-11-07T05:31:56Z",
    "updated_at": "2023-11-07T05:31:56Z",
    "malice_source": "<string>",
    "malice_overridden_at": "2023-11-07T05:31:56Z",
    "enrichment_results": {}
  },
  "meta": {}
}

Path Parameters

indicator_uuid
string<uuid>
required

Body

application/json

Patch request for updating an indicator — PATCH /v1/indicators/{uuid}.

malice
enum<string> | null

Indicator malice verdict — shared validation enum.

Available options:
Pending,
Benign,
Suspicious,
Malicious

Response

Successful Response

data
IndicatorDetailResponse · object
required

Indicator with full enrichment data including raw provider responses.

meta
Meta · object