Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Campaign → Update
AI-generatedSummary
Update an existing OpenCTI campaign with specified fields
Inputs
- campaignId (required) — Identifier of the campaign to update
- updateFields — Object containing fields to update such as description, first_seen, last_seen, name, objective
Output shape
a single updated campaign object
The response reflects the updated campaign; if no changes are made the body may be empty
Examples
Example 1: Rename a campaign and add a description
{"campaignId": "c123", "updateFields": {"name": "Updated Campaign", "description": "New campaign description"}}
Example 2: Mark campaign as seen with timestamps
{"campaignId": "c123", "updateFields": {"first_seen": "2023-01-01T00:00:00Z", "last_seen": "2023-12-31T23:59:59Z"}}