Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Campaign → Create
AI-generatedSummary
Create a campaign
Inputs
- name (required) — Campaign name (required)
- additionalFields — Additional free‑form fields for the campaign
- aliases — Comma‑separated aliases for the campaign
- confidence — Confidence score (0‑100) for the campaign
- createdBy — Identity ID of the user creating the campaign
- description — Free‑text description of the campaign
- externalReferences — Comma‑separated IDs of external references linked to the campaign
- first_seen — Timestamp when the campaign was first observed
- objectLabel — Comma‑separated IDs of labels associated with the campaign
- last_seen — Timestamp of the most recent observation of the campaign
- markingDefinitions — Comma‑separated IDs of marking definitions applied to the campaign
- objective — Objective text for the campaign
Output shape
a campaign object
Returns the created campaign including its generated ID and all specified fields; errors are returned as standard error response.
Examples
Example 1: Create a campaign named 'Finance Threat Report' with confidence 75 and an alias 'Finance-Report'.
name=Finance Threat Report, confidence=75, aliases=Finance-Report
Example 2: Create a campaign with full additional fields: name='Health Initiative', confidence=90, createdBy='user-987', description='Health sector threat', externalReferences='ref-123,ref-456', first_seen='2024-01-01T00:00:00Z', last_seen='2024-09-30T23:59:59Z', markingDefinitions='mark-1,mark-2', objective='Increase health sector awareness'.
name=Health Initiative, confidence=90, createdBy=user-987, description=Health sector threat, externalReferences=ref-123,ref-456, first_seen=2024-01-01T00:00:00Z, last_seen=2024-09-30T23:59:59Z, markingDefinitions=mark-1,mark-2, objective=Increase health sector awareness