# SentinelOne

`iocs.json` is a ready-to-POST body for `POST /web/api/v2.1/threat-intelligence/iocs`. Add your own `filter` scope (account/site) before posting. validUntil is 30 days.