Deleting Data

ThreatExchange currently supports deletion for ThreatDescriptor objects and relationships between ThreatIndicator objects.

Deletion in the UI is not yet supported: please see here for details.

To delete a ThreatDescriptor using the API:

DELETE https://graph.facebook.com/v2.11/<object_id>

To delete a relationship between ThreatIndicators using the API:

DELETE https://graph.facebook.com/v2.11/<object_id>/related?related_id=<object_id_2>

We do not support deletes for Tags or MalwareAnalysis objects. If you wish to indicate data is no longer valid, set the expired_on field for automatic soft-deletes and the status field to NON_MALICIOUS for handling false positive cases.