Good morning! Can you talk a little more about your use case, please? (why the IPs are added/removed? what they are used for? is their own interaction a single playbook?)
I think you are looking for some type of expiration for those IP addresses, and I have some ideas on this.
This is hard to do in a list or CSV format. You'll need to create an automation that handles both the IP and the expiry date.
Another solution would be to use the indicator expiration built in to platform.
- Ingest list of IPs as IOCs
- Add specific tag for the IP list ingested
- Set the indicator expiry at ingestion time
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!