The Cybereason Operation for ThreatQ enables a user to add an indicator to the blocklist or allowlist in the Cybereason platform. It also allows you to query an indicator for any sightings.