Supported API Endpoints

The API endpoints described in the topics below can be used to interact with ThreatStream to retrieve, create, update, and manage threat intelligence data:

• App Store History

• Confidence

• Feed

• Import (with approval)

• Import (without approval)

• Import Observables from STIX files

• Intelligence

• Intelligence Enrichments

• Intelligence Enrichments

• Report

• Rules

• Sandbox

• Snapshot

• SSO History

• Threat Model Search

• Threat Models

  • Actors

  • Attack Patterns

  • Campaigns

  • Incidents

  • Malware

  • Signatures

  • Threat Bulletins

  • TTPs (Tactics, Techniques, and Procedures)

  • Vulnerabilities

• Managing Threat Model Associations

• Observable Tags in Bulk

• Threat Model Entity Tags in Bulk

• User Administration

• User Audit

• Users and Roles Management on the Anomali Platform

• Whitelist

• Workgroup API Resources