create_collection
Create a new collection of IOCs (domains, files, IPs, URLs) with a name, description, and optional privacy setting to organize threat intelligence data.
Instructions
Creates a new collection in Google Threat Intelligence. Ask for the collection's privacy (public or private) if the user doesn't specify.
Args: name (required): The name of the collection. description (required): A description of the collection. iocs (required): Indicators of Compromise (IOCs) to include in the collection. The items in the list can be domains, files, ip_addresses, or urls. At least one IOC must be provided. private: Indicates whether the collection should be private. Returns: A dictionary representing the newly created collection.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| iocs | Yes | ||
| name | Yes | ||
| private | No | ||
| description | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |