Hi.
Has anyone been able to successfully pull IOCs from a STIX/TAXII feed and upload them to a community threat? I have been able to do this BUT I’m having a hell of a time trying to remove just ONE IOC from a owned community threat. I think according to the API docs that you have to “replace” or “reupload” a new list MINUS the IOC you don’t want to include. Is this true or is there any easier way?