How to upload/attach a file (vault) to a container via rest api?

[rudnima7]

I am looking for a rest endpoint to be able to attach the source file to the event. You can do this through the browser, and through the rest api I found an endpoint that only allows you to download the metadata of a given file. Is it possible to upload a source file via rest api?

https://docs.splunk.com/Documentation/SOAR/current/PlatformAPI/RESTVault - only GET methods for metadata, like hash, filename etc.

[kblaine]

I am not sure about using the rest endpoint to do it but there is a direct phantom api that allow you to add to the event called phantom.vault_add