OpenCTI icon

OpenCTI

Interact with the OpenCTI Cyber Threat Intelligence platform

Actions149

Campaign → Create

AI-generated

Summary

Create a campaign

Inputs

  • name (required) — Campaign name (required)
  • additionalFields — Additional free‑form fields for the campaign
  • aliases — Comma‑separated aliases for the campaign
  • confidence — Confidence score (0‑100) for the campaign
  • createdBy — Identity ID of the user creating the campaign
  • description — Free‑text description of the campaign
  • externalReferences — Comma‑separated IDs of external references linked to the campaign
  • first_seen — Timestamp when the campaign was first observed
  • objectLabel — Comma‑separated IDs of labels associated with the campaign
  • last_seen — Timestamp of the most recent observation of the campaign
  • markingDefinitions — Comma‑separated IDs of marking definitions applied to the campaign
  • objective — Objective text for the campaign

Output shape

a campaign object

Returns the created campaign including its generated ID and all specified fields; errors are returned as standard error response.

Examples

Example 1: Create a campaign named 'Finance Threat Report' with confidence 75 and an alias 'Finance-Report'.

name=Finance Threat Report, confidence=75, aliases=Finance-Report

Example 2: Create a campaign with full additional fields: name='Health Initiative', confidence=90, createdBy='user-987', description='Health sector threat', externalReferences='ref-123,ref-456', first_seen='2024-01-01T00:00:00Z', last_seen='2024-09-30T23:59:59Z', markingDefinitions='mark-1,mark-2', objective='Increase health sector awareness'.

name=Health Initiative, confidence=90, createdBy=user-987, description=Health sector threat, externalReferences=ref-123,ref-456, first_seen=2024-01-01T00:00:00Z, last_seen=2024-09-30T23:59:59Z, markingDefinitions=mark-1,mark-2, objective=Increase health sector awareness

Links

Discussion