ThreatConnect API

api-v3-artifacts-{uniqueId}

Delete Artifact by ID Retrieve Artifact by ID Update Artifact

api-v3-artifacts-tql

api-v3-artifacts-fields

Retrieve fields

api-v3-artifacts

Delete Artifacts Retrieve Artifacts Retrieve entity info Create Artifact

api-v3-artifactTypes-{uniqueId}

Retrieve ArtifactType by ID

api-v3-artifactTypes-tql

api-v3-artifactTypes-fields

Retrieve fields

api-v3-artifactTypes

Retrieve ArtifactTypes Retrieve entity info

api-v3-attributeTypes-{uniqueId}

Retrieve AttributeType by ID

api-v3-attributeTypes-tql

api-v3-attributeTypes-fields

Retrieve fields

api-v3-attributeTypes

Retrieve AttributeTypes Retrieve entity info

api-v3-caseAttributes-{uniqueId}

Delete CaseAttribute by ID Retrieve CaseAttribute by ID Update CaseAttribute by ID

api-v3-caseAttributes-tql

api-v3-caseAttributes-fields

Retrieve fields

api-v3-caseAttributes

Retrieve CaseAttributes Retrieve entity info Create CaseAttribute

api-v3-cases-{uniqueId}

Delete Case by ID Retrieve Case by ID Update Case

api-v3-cases-tql

api-v3-cases-fields

Retrieve fields

Delete Cases Retrieve Cases Retrieve entity info Create Case

api-v3-groupAttributes-{uniqueId}

Delete GroupAttribute by ID Retrieve GroupAttribute by ID Update GroupAttribute by ID

api-v3-groupAttributes-tql

api-v3-groupAttributes-fields

Retrieve fields

api-v3-groupAttributes

Retrieve GroupAttributes Retrieve entity info Create GroupAttribute

api-v3-groups-{uniqueId}-upload

Create Document Update Document

api-v3-groups-{uniqueId}-pdf

api-v3-groups-{uniqueId}-download

Retrieve Document

api-v3-groups-{uniqueId}

Delete Group by ID Retrieve Group by ID Update Group by ID

api-v3-groups-tql

api-v3-groups-fields

Retrieve fields

Retrieve Groups Retrieve entity info Create Group

api-v3-indicatorAttributes-{uniqueId}

Delete IndicatorAttribute by ID Retrieve IndicatorAttribute by ID Update IndicatorAttribute by ID

api-v3-indicatorAttributes-tql

api-v3-indicatorAttributes-fields

Retrieve fields

api-v3-indicatorAttributes

Retrieve IndicatorAttributes Retrieve entity info Create IndicatorAttribute

api-v3-indicators-{uniqueId}-enrich

Enrich Indicator

api-v3-indicators-{uniqueId}

Delete Indicator by ID Retrieve Indicator by ID Update Indicator by ID

api-v3-indicators-tql

api-v3-indicators-fields

Retrieve fields

api-v3-indicators-enrich

Enrich Indicators

api-v3-indicators-deleted

Retrieve Deleted Indicators

api-v3-indicators

Retrieve Indicators Retrieve entity info Create Indicator

api-v3-notes-{uniqueId}

Delete Note by ID Retrieve Note by ID Update Note by ID

api-v3-notes-tql

api-v3-notes-fields

Retrieve fields

Delete Notes Retrieve Notes Retrieve entity info Create Note

api-v3-security-users-{uniqueId}

Retrieve User by ID

api-v3-security-users-tql

api-v3-security-users-fields

Retrieve fields

api-v3-security-users

Retrieve Users Retrieve entity info

api-v3-security-userGroups-{uniqueId}

Retrieve UserGroup by ID

api-v3-security-userGroups-tql

api-v3-security-userGroups-fields

Retrieve fields

api-v3-security-userGroups

Retrieve UserGroups Retrieve entity info

api-v3-security-systemRoles-{uniqueId}

Retrieve SystemRole by ID

api-v3-security-systemRoles-tql

api-v3-security-systemRoles-fields

Retrieve fields

api-v3-security-systemRoles

Retrieve SystemRoles Retrieve entity info

api-v3-security-owners-{uniqueId}

Retrieve Owner by ID

api-v3-security-owners-tql

api-v3-security-owners-fields

Retrieve fields

api-v3-security-owners

Retrieve Owners Retrieve entity info

api-v3-security-ownerRoles-{uniqueId}

Retrieve OwnerRole by ID

api-v3-security-ownerRoles-tql

api-v3-security-ownerRoles-fields

Retrieve fields

api-v3-security-ownerRoles

Retrieve OwnerRoles Retrieve entity info

api-v3-securityLabels-{uniqueId}

Retrieve SecurityLabel by ID

api-v3-securityLabels-tql

api-v3-securityLabels-fields

Retrieve fields

api-v3-securityLabels

Retrieve SecurityLabels Retrieve entity info

api-v3-tags-{uniqueId}

Delete Tag by ID Retrieve Tag by ID Update Tag by ID

api-v3-tags-tql

api-v3-tags-fields

Retrieve fields

Retrieve Tags Retrieve entity info Create Tag

api-v3-tasks-{uniqueId}

Delete Task by ID Retrieve Task by ID Update Task by ID

api-v3-tasks-tql

api-v3-tasks-fields

Retrieve fields

Delete Tasks Retrieve Tasks Retrieve entity info Create Task

api-v3-victimAssets-{uniqueId}

Delete VictimAsset by ID Retrieve VictimAsset by ID Update VictimAsset by ID

api-v3-victimAssets-tql

api-v3-victimAssets-fields

Retrieve fields

api-v3-victimAssets

Retrieve VictimAssets Retrieve entity info Create VictimAsset

api-v3-victimAttributes-{uniqueId}

Delete VictimAttribute by ID Retrieve VictimAttribute by ID Update VictimAttribute by ID

api-v3-victimAttributes-tql

api-v3-victimAttributes-fields

Retrieve fields

api-v3-victimAttributes

Retrieve VictimAttributes Retrieve entity info Create VictimAttribute

api-v3-victims-{uniqueId}

Delete Victim by ID Retrieve Victim by ID Update Victim by ID

api-v3-victims-tql

api-v3-victims-fields

Retrieve fields

Retrieve Victims Retrieve entity info Create Victim

api-v3-workflowEvents-{uniqueId}

Delete WorkflowEvent by ID Retrieve WorkflowEvent by ID Update WorkflowEvent by ID

api-v3-workflowEvents-tql

api-v3-workflowEvents-fields

Retrieve fields

api-v3-workflowEvents

Delete WorkflowEvents Retrieve WorkflowEvents Retrieve entity info Create WorkflowEvent

api-v3-workflowTemplates-{uniqueId}

Delete WorkflowTemplate by ID Retrieve WorkflowTemplate by ID Update WorkflowTemplate by ID

api-v3-workflowTemplates-tql

api-v3-workflowTemplates-fields

Retrieve fields

api-v3-workflowTemplates

Delete WorkflowTemplates Retrieve WorkflowTemplates Retrieve entity info Create WorkflowTemplate

ThreatConnect API

api-v3-artifacts-{uniqueId}

Delete Artifact by ID Retrieve Artifact by ID Update Artifact

api-v3-artifacts-tql

api-v3-artifacts-fields

Retrieve fields

api-v3-artifacts

Delete Artifacts Retrieve Artifacts Retrieve entity info Create Artifact

api-v3-artifactTypes-{uniqueId}

Retrieve ArtifactType by ID

api-v3-artifactTypes-tql

api-v3-artifactTypes-fields

Retrieve fields

api-v3-artifactTypes

Retrieve ArtifactTypes Retrieve entity info

api-v3-attributeTypes-{uniqueId}

Retrieve AttributeType by ID

api-v3-attributeTypes-tql

api-v3-attributeTypes-fields

Retrieve fields

api-v3-attributeTypes

Retrieve AttributeTypes Retrieve entity info

api-v3-caseAttributes-{uniqueId}

Delete CaseAttribute by ID Retrieve CaseAttribute by ID Update CaseAttribute by ID

api-v3-caseAttributes-tql

api-v3-caseAttributes-fields

Retrieve fields

api-v3-caseAttributes

Retrieve CaseAttributes Retrieve entity info Create CaseAttribute

api-v3-cases-{uniqueId}

Delete Case by ID Retrieve Case by ID Update Case

api-v3-cases-tql

api-v3-cases-fields

Retrieve fields

Delete Cases Retrieve Cases Retrieve entity info Create Case

api-v3-groupAttributes-{uniqueId}

Delete GroupAttribute by ID Retrieve GroupAttribute by ID Update GroupAttribute by ID

api-v3-groupAttributes-tql

api-v3-groupAttributes-fields

Retrieve fields

api-v3-groupAttributes

Retrieve GroupAttributes Retrieve entity info Create GroupAttribute

api-v3-groups-{uniqueId}-upload

Create Document Update Document

api-v3-groups-{uniqueId}-pdf

api-v3-groups-{uniqueId}-download

Retrieve Document

api-v3-groups-{uniqueId}

Delete Group by ID Retrieve Group by ID Update Group by ID

api-v3-groups-tql

api-v3-groups-fields

Retrieve fields

Retrieve Groups Retrieve entity info Create Group

api-v3-indicatorAttributes-{uniqueId}

Delete IndicatorAttribute by ID Retrieve IndicatorAttribute by ID Update IndicatorAttribute by ID

api-v3-indicatorAttributes-tql

api-v3-indicatorAttributes-fields

Retrieve fields

api-v3-indicatorAttributes

Retrieve IndicatorAttributes Retrieve entity info Create IndicatorAttribute

api-v3-indicators-{uniqueId}-enrich

Enrich Indicator

api-v3-indicators-{uniqueId}

Delete Indicator by ID Retrieve Indicator by ID Update Indicator by ID

api-v3-indicators-tql

api-v3-indicators-fields

Retrieve fields

api-v3-indicators-enrich

Enrich Indicators

api-v3-indicators-deleted

Retrieve Deleted Indicators

api-v3-indicators

Retrieve Indicators Retrieve entity info Create Indicator

api-v3-notes-{uniqueId}

Delete Note by ID Retrieve Note by ID Update Note by ID

api-v3-notes-tql

api-v3-notes-fields

Retrieve fields

Delete Notes Retrieve Notes Retrieve entity info Create Note

api-v3-security-users-{uniqueId}

Retrieve User by ID

api-v3-security-users-tql

api-v3-security-users-fields

Retrieve fields

api-v3-security-users

Retrieve Users Retrieve entity info

api-v3-security-userGroups-{uniqueId}

Retrieve UserGroup by ID

api-v3-security-userGroups-tql

api-v3-security-userGroups-fields

Retrieve fields

api-v3-security-userGroups

Retrieve UserGroups Retrieve entity info

api-v3-security-systemRoles-{uniqueId}

Retrieve SystemRole by ID

api-v3-security-systemRoles-tql

api-v3-security-systemRoles-fields

Retrieve fields

api-v3-security-systemRoles

Retrieve SystemRoles Retrieve entity info

api-v3-security-owners-{uniqueId}

Retrieve Owner by ID

api-v3-security-owners-tql

api-v3-security-owners-fields

Retrieve fields

api-v3-security-owners

Retrieve Owners Retrieve entity info

api-v3-security-ownerRoles-{uniqueId}

Retrieve OwnerRole by ID

api-v3-security-ownerRoles-tql

api-v3-security-ownerRoles-fields

Retrieve fields

api-v3-security-ownerRoles

Retrieve OwnerRoles Retrieve entity info

api-v3-securityLabels-{uniqueId}

Retrieve SecurityLabel by ID

api-v3-securityLabels-tql

api-v3-securityLabels-fields

Retrieve fields

api-v3-securityLabels

Retrieve SecurityLabels Retrieve entity info

api-v3-tags-{uniqueId}

Delete Tag by ID Retrieve Tag by ID Update Tag by ID

api-v3-tags-tql

api-v3-tags-fields

Retrieve fields

Retrieve Tags Retrieve entity info Create Tag

api-v3-tasks-{uniqueId}

Delete Task by ID Retrieve Task by ID Update Task by ID

api-v3-tasks-tql

api-v3-tasks-fields

Retrieve fields

Delete Tasks Retrieve Tasks Retrieve entity info Create Task

api-v3-victimAssets-{uniqueId}

Delete VictimAsset by ID Retrieve VictimAsset by ID Update VictimAsset by ID

api-v3-victimAssets-tql

api-v3-victimAssets-fields

Retrieve fields

api-v3-victimAssets

Retrieve VictimAssets Retrieve entity info Create VictimAsset

api-v3-victimAttributes-{uniqueId}

Delete VictimAttribute by ID Retrieve VictimAttribute by ID Update VictimAttribute by ID

api-v3-victimAttributes-tql

api-v3-victimAttributes-fields

Retrieve fields

api-v3-victimAttributes

Retrieve VictimAttributes Retrieve entity info Create VictimAttribute

api-v3-victims-{uniqueId}

Delete Victim by ID Retrieve Victim by ID Update Victim by ID

api-v3-victims-tql

api-v3-victims-fields

Retrieve fields

Retrieve Victims Retrieve entity info Create Victim

api-v3-workflowEvents-{uniqueId}

Delete WorkflowEvent by ID Retrieve WorkflowEvent by ID Update WorkflowEvent by ID

api-v3-workflowEvents-tql

api-v3-workflowEvents-fields

Retrieve fields

api-v3-workflowEvents

Delete WorkflowEvents Retrieve WorkflowEvents Retrieve entity info Create WorkflowEvent

api-v3-workflowTemplates-{uniqueId}

Delete WorkflowTemplate by ID Retrieve WorkflowTemplate by ID Update WorkflowTemplate by ID

api-v3-workflowTemplates-tql

api-v3-workflowTemplates-fields

Retrieve fields

api-v3-workflowTemplates

Delete WorkflowTemplates Retrieve WorkflowTemplates Retrieve entity info Create WorkflowTemplate

Home ThreatConnect API api-v3-cases-fieldsRetrieve fields

Retrieve fields

OPTIONS {{baseUrl}}/api/v3/cases/fields

Returns a list of valid field options

RESPONSES

status: OK

api-v3-cases-fields