Edit a single watchlist item

[CodnChips]

Hi,

I have a watchlist, let's say it has 3000 watchlist items present.

I want to modify the value of an entry - an IP address that is no longer required.

Can I edit this programmatically?   At present I manually have to scroll through each page of results with a CTRL+F to find on the page which is really lame.

Surely there must be a better way?

[#2]

Hey @CodnChips 

have you considered creating a logic app to find the value and change it within the watchlist

There are logic app components for watchlists for sentinel

Check out this reference here

[#3]

Hey @BillClarksonAntill, thanks very much for your response & link. I had not investigated LogicApps for this, so I will have a read n click, and see what I can see!

[#4]

A logicApp does seem a bit like "a sledgehammer to crack a walnut" and I don't like that using them incurs cost. In order to manage\maintain threat intelligence, basic list admin should be a fundamental piece of functionality within the interface. I'll find somewhere to raise it as a feature request.