🚧

IoC scanning and dataset inclusion

Any IoC submitted or queried via the API will be scanned and added to the VirusTotal dataset, making it accessible to the community. Do not submit or query indicators containing sensitive, confidential, or personally identifiable information (PII).

This endpoint allows updating a collection's attributes (such as name or description) and adding new elements to a collection by using a raw text.

The following request body shows an example of how to update a collection's name and add new IOCs to it by using a raw text:

{
	"data": {
		"attributes": {
			"name": "Updating the name"
		},
		"raw_items": "This is a text containing a IoC, www.virustotal.com",
		"type": "collection"
	}
}