createOrgSecIntelProfile
Create an organization SecIntel profile with category-specific protection levels for threat intelligence feeds.
Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.
Format:
Authorization: Token {apitoken}
Notes:
- An API token generated for a specific admin has the same privileges as that admin
- An API token is automatically removed if it is not used for more than 90 days
- SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.
In: header
Path Parameters
uuidRequest Body
application/json
Request Body
SecIntel profile containing category-specific threat intelligence actions
Display name of the SecIntel profile
Category-specific SecIntel action settings included in this profile
Response Body
curl -X POST "https://example.com/api/v1/orgs/000000ab-00ab-00ab-00ab-0000000000ab/secintelprofiles" \ -H "Content-Type: application/json" \ -d '{ "name": "secintel-custom", "profiles": [ { "action": "default", "category": "CC" } ] }'{ "name": "secintel-custom", "profiles": [ { "action": "default", "category": "CC" } ]}listOrgSecIntelProfiles GET
List organization SecIntel profiles. These profiles define protection levels for SecIntel feed categories such as command-and-control, infected host, and DNS.
getOrgSecIntelProfile GET
Return an organization SecIntel profile, including the protection level configured for each SecIntel feed category.