DFIR IRIS icon

DFIR IRIS

works with DFIR IRIS IRP

Actions85

Asset → Add

AI-generated

Overview

The 'Asset Add' operation in the DFIR IRIS node for n8n facilitates the creation of new assets within the DFIR IRIS Incident Response Platform. This operation is essential for integrating asset management into automated workflows, enabling the addition of assets such as computers, servers, or network devices directly from n8n.

Use Case Examples

  1. Automatically adding a new server asset to DFIR IRIS when it's provisioned in your infrastructure.
  2. Integrating asset addition into incident response workflows to ensure all relevant assets are tracked and managed.

Properties

Name Meaning
Case ID The unique identifier for the case to which the asset is associated. This is a required field.
Asset Name The name of the asset being added. This is a required field.
Asset Type Name or ID Specifies the type of the asset, either by name or ID. This is a required field.
Additional Fields A collection of optional fields that provide additional information about the asset, such as analysis status, compromise status, description, domain, IP address, tags, custom attributes, and related IOCs.
Options A collection of optional settings that control the behavior of the operation, including whether to return raw response data, which fields to include in the response, whether to exclude certain fields, and whether to ignore empty asset names.

Output

JSON

  • asset_id - The unique identifier assigned to the newly created asset.
  • asset_name - The name of the asset.
  • asset_type - The type of the asset.
  • asset_tags - Tags associated with the asset.
  • asset_ip - IP address of the asset.
  • asset_domain - Domain associated with the asset.
  • asset_description - Description of the asset.
  • asset_info - Additional information about the asset.
  • asset_enrichment - Enrichment data related to the asset.
  • asset_compromise_status_id - Compromise status of the asset.
  • asset_analysis_status_id - Analysis status of the asset.
  • asset_uuid - UUID of the asset.
  • date_added - Timestamp when the asset was added.
  • date_update - Timestamp when the asset was last updated.
  • linked_ioc - Indicators of Compromise linked to the asset.
  • user_id - ID of the user who added the asset.

Dependencies

  • DFIR IRIS API access
  • API authentication token

Troubleshooting

  • Ensure that the 'Case ID' and 'Asset Type Name or ID' are correctly specified to avoid errors during asset creation.
  • Verify that all required fields are provided and correctly formatted to prevent validation errors.
  • Check the API authentication token for validity and necessary permissions to perform asset creation operations.

Links

Discussion