DFIR IRIS icon

DFIR IRIS

works with DFIR IRIS IRP

Asset → Delete

AI-generated

Overview

This node operation deletes an asset within a specified case in the DFIR IRIS system. It is useful for managing digital forensic and incident response assets by removing those that are no longer needed or relevant. For example, a user can delete an outdated or incorrect asset linked to a particular case by specifying the case ID and the asset's name or ID.

Use Case Examples

  1. Deleting an asset from a case to keep the case data clean and up-to-date.
  2. Removing an asset that was mistakenly added to a case.

Properties

Name Meaning
Case ID The unique identifier of the case from which the asset will be deleted.
Asset Name or ID The identifier or name of the asset to be deleted, selectable from a list or specified via expression.
Return Raw Option to return the raw response from the API instead of processed data.

Output

JSON

  • success - Indicates whether the asset deletion was successful.
  • message - Additional information or confirmation message about the deletion operation.

Dependencies

  • Requires API authentication to DFIR IRIS system to perform asset deletion.

Troubleshooting

  • Ensure the Case ID and Asset Name or ID are correct and exist in the system to avoid errors.
  • If the asset cannot be deleted, check user permissions and API credentials.
  • If the 'Return Raw' option is enabled, the output will be the raw API response which may require additional parsing.

Discussion