Add Tag to Indicator

POST /1.3/indicators/tags

Description

Creates a tag on an indicator, for the given enclave. If the tag already exists, it will be reused.

Parameters

The request must specify the indicator value to associate the tag with and the name and enclaveId of the indicator tag. The tag will be assigned, or created and assigned if it does not already exist.

The request takes no URL parameters. The request body should be a JSON with the following fields:

Parameter Required Default Description
value X www.example.com Indicator value to tag.
tag X   The tag object to create (see below).

The tag object should contain the following fields:

Parameter Required Default Description
name X malicious The name of the tag.
enclaveId X 218019c2-a914-4961-8f59-b05abd5e753c The id of the enclave to create the tag in.

Response (200)

The Tag after operation success.

Example Usage

Request

{
    "value": "1.2.3.4",
    "tag": {
        "name": "new-tag",
        "enclaveId": "1fd0dbf4-316c-4ae5-9e93-2d8a32f30f86"
    }
}

Response

{
    "guid": "9b07f7fb-76d0-4f54-b1ea-11c38036cf81",
    "name": "new-tag",
    "enclaveId": "1fd0dbf4-316c-4ae5-9e93-2d8a32f30f86"
}