Editing existing data

The ThreatExchange API allows for editing existing ThreatIndicator objects. As with all Facebook Graph APIs, editing is performed via an HTTP POST request to the object's unique ID URL.

Using the UI

Using any of various search mechanisms, identify a descriptor you own and click the Edit button:

Then, fields are editable as in the Create pop-up:

Using the API

In this example, we are updating the status of ThreatIndicator object with the ID 853037291373757:

https://graph.facebook.com/v4.0/853037291373757?access_token=555|aSdF123GhK

POST DATA:
status=NON_MALICIOUS
&amp;description=Not%20malicious

Data returned:

{
"success": true
}