OpenCTI icon

OpenCTI

Interact with the OpenCTI Cyber Threat Intelligence platform

Actions149

Malware → Update

AI-generated

Summary

Update a malware record with specified fields.

Inputs

  • malwareId (required) — Unique identifier of the malware to update.
  • updateFields — Collection of fields to update; supports description, first_seen, is_family, last_seen, name.

Output shape

a single updated malware record

The response contains the full updated malware object; optional fields may be omitted.

Examples

Example 1: Update name and description of a malware

{"malwareId": "malw-123", "updateFields": {"description": "New description", "name": "NewName"}}

Links

Discussion