{
  "info": {
    "_postman_id": "256e02e5-d982-4dac-8399-dab484acdfae",
    "name": "Microsoft Azure Microsoft Sentinel Upload Indicators API",
    "description": "Spec for Microsoft Sentinel Upload Indicators API.",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-06-05T15:20:35.000Z",
    "updatedAt": "2026-06-05T15:20:36.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-256e02e5-d982-4dac-8399-dab484acdfae"
  },
  "item": [
    {
      "name": "workspaces",
      "item": [
        {
          "name": "{workspaceId}",
          "item": [
            {
              "name": "threatintelligenceindicators:upload",
              "item": [
                {
                  "name": "Microsoft Azure Upload The Indicators To The Workspace",
                  "id": "ea592cae-632c-4399-9727-1bd85088fa6d",
                  "protocolProfileBehavior": {
                    "disableBodyPruning": true
                  },
                  "request": {
                    "auth": {
                      "type": "oauth2",
                      "oauth2": [
                        {
                          "key": "scope",
                          "value": "user_impersonation",
                          "type": "string"
                        },
                        {
                          "key": "authUrl",
                          "value": "https://login.microsoftonline.com/common/oauth2/authorize",
                          "type": "string"
                        },
                        {
                          "key": "grant_type",
                          "value": "implicit",
                          "type": "string"
                        }
                      ]
                    },
                    "method": "POST",
                    "header": [
                      {
                        "key": "Content-Type",
                        "value": "application/json"
                      },
                      {
                        "key": "Accept",
                        "value": "application/json"
                      }
                    ],
                    "body": {
                      "mode": "raw",
                      "raw": "{\n  \"sourcesystem\": \"<string>\"\n}",
                      "options": {
                        "raw": {
                          "headerFamily": "json",
                          "language": "json"
                        }
                      }
                    },
                    "url": {
                      "raw": "{{baseUrl}}/workspaces/:workspaceId/threatintelligenceindicators:upload?api-version=<string>",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "workspaces",
                        ":workspaceId",
                        "threatintelligenceindicators:upload"
                      ],
                      "query": [
                        {
                          "description": "(Required) The api-version for operation",
                          "key": "api-version",
                          "value": "<string>"
                        }
                      ],
                      "variable": [
                        {
                          "id": "65300c59-6e99-4e4a-905c-47b6c5b2d1d1",
                          "key": "workspaceId",
                          "value": "<string>",
                          "description": "(Required) The workspace ID for the indicators to be uploaded."
                        }
                      ]
                    },
                    "description": "Upload the list of indicators to the workspace specified"
                  },
                  "response": [
                    {
                      "id": "7803d23e-8eca-4eb4-9a01-a3acce32df44",
                      "name": "The API returns 200 when at least one indicator is successfully validated and published.",
                      "originalRequest": {
                        "method": "POST",
                        "header": [
                          {
                            "key": "Content-Type",
                            "value": "application/json"
                          },
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: oauth2",
                            "key": "Authorization",
                            "value": "<token>"
                          }
                        ],
                        "body": {
                          "mode": "raw",
                          "raw": "{\n  \"sourcesystem\": \"<string>\"\n}",
                          "options": {
                            "raw": {
                              "headerFamily": "json",
                              "language": "json"
                            }
                          }
                        },
                        "url": {
                          "raw": "{{baseUrl}}/workspaces/:workspaceId/threatintelligenceindicators:upload?api-version=<string>",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "workspaces",
                            ":workspaceId",
                            "threatintelligenceindicators:upload"
                          ],
                          "query": [
                            {
                              "description": "(Required) The api-version for operation",
                              "key": "api-version",
                              "value": "<string>"
                            }
                          ],
                          "variable": [
                            {
                              "key": "workspaceId"
                            }
                          ]
                        }
                      },
                      "status": "OK",
                      "code": 200,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"errors\": [\n    {\n      \"recordIndex\": \"<long>\",\n      \"validationErrorMessages\": [\n        \"<string>\",\n        \"<string>\"\n      ]\n    },\n    {\n      \"recordIndex\": \"<long>\",\n      \"validationErrorMessages\": [\n        \"<string>\",\n        \"<string>\"\n      ]\n    }\n  ]\n}",
                      "createdAt": "2026-06-05T15:20:36.000Z",
                      "updatedAt": "2026-06-05T15:20:36.000Z",
                      "uid": "35240-7803d23e-8eca-4eb4-9a01-a3acce32df44"
                    },
                    {
                      "id": "e5931c37-8878-4a4c-a620-79445bce0656",
                      "name": "Upload Indicators API service error response.",
                      "originalRequest": {
                        "method": "POST",
                        "header": [
                          {
                            "key": "Content-Type",
                            "value": "application/json"
                          },
                          {
                            "key": "Accept",
                            "value": "application/json"
                          },
                          {
                            "description": "Added as a part of security scheme: oauth2",
                            "key": "Authorization",
                            "value": "<token>"
                          }
                        ],
                        "body": {
                          "mode": "raw",
                          "raw": "{\n  \"sourcesystem\": \"<string>\"\n}",
                          "options": {
                            "raw": {
                              "headerFamily": "json",
                              "language": "json"
                            }
                          }
                        },
                        "url": {
                          "raw": "{{baseUrl}}/workspaces/:workspaceId/threatintelligenceindicators:upload?api-version=<string>",
                          "host": [
                            "{{baseUrl}}"
                          ],
                          "path": [
                            "workspaces",
                            ":workspaceId",
                            "threatintelligenceindicators:upload"
                          ],
                          "query": [
                            {
                              "description": "(Required) The api-version for operation",
                              "key": "api-version",
                              "value": "<string>"
                            }
                          ],
                          "variable": [
                            {
                              "key": "workspaceId"
                            }
                          ]
                        }
                      },
                      "status": "Internal Server Error",
                      "code": 500,
                      "_postman_previewlanguage": "json",
                      "header": [
                        {
                          "key": "Content-Type",
                          "value": "application/json"
                        }
                      ],
                      "cookie": [],
                      "responseTime": null,
                      "body": "{\n  \"error\": {\n    \"code\": \"<string>\",\n    \"message\": \"<string>\"\n  }\n}",
                      "createdAt": "2026-06-05T15:20:36.000Z",
                      "updatedAt": "2026-06-05T15:20:36.000Z",
                      "uid": "35240-e5931c37-8878-4a4c-a620-79445bce0656"
                    }
                  ],
                  "createdAt": "2026-06-05T15:20:36.000Z",
                  "updatedAt": "2026-06-05T15:20:36.000Z",
                  "uid": "35240-ea592cae-632c-4399-9727-1bd85088fa6d"
                }
              ],
              "id": "3e4ff2b1-48c2-4be4-a435-3f802e2e5006",
              "createdAt": "2026-06-05T15:20:36.000Z",
              "updatedAt": "2026-06-05T15:20:36.000Z",
              "uid": "35240-3e4ff2b1-48c2-4be4-a435-3f802e2e5006"
            }
          ],
          "id": "da1b49e8-4dc3-4f87-bb8d-b9aa5fffe170",
          "createdAt": "2026-06-05T15:20:36.000Z",
          "updatedAt": "2026-06-05T15:20:36.000Z",
          "uid": "35240-da1b49e8-4dc3-4f87-bb8d-b9aa5fffe170"
        }
      ],
      "id": "773b662b-6240-4538-b671-c48e2d13c5e2",
      "createdAt": "2026-06-05T15:20:36.000Z",
      "updatedAt": "2026-06-05T15:20:36.000Z",
      "uid": "35240-773b662b-6240-4538-b671-c48e2d13c5e2"
    }
  ],
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://sentinelus.azure-api.net"
    }
  ]
}