Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Asset → Update
AI-generatedOverview
The 'DFIR IRIS' n8n node facilitates the management of digital forensics and incident response (DFIR) assets within the IRIS platform. It enables users to update asset details associated with a specific case, streamlining the process of maintaining accurate and up-to-date asset information during incident investigations.
Use Case Examples
- Updating the status of an asset to 'Done' after completing analysis.
- Modifying the description of an asset to reflect new findings.
- Assigning tags to an asset to categorize it based on its role in the investigation.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier for the case associated with the asset. |
| Asset Name or ID | The name or unique identifier of the asset to be updated. |
| Asset Name | The name of the asset. |
| Asset Type Name or ID | The type or unique identifier of the asset. |
| Additional Fields | A collection of optional fields to provide extra information about the asset, such as analysis status, compromise status, description, domain, IP address, tags, custom attributes, and related IOCs. |
| Options | Additional settings to control the node's behavior, including whether to return the raw response and which fields to include or exclude in the output. |
Output
JSON
analysis_status_id- The current analysis status of the asset.asset_compromise_status_id- The compromise status of the asset.asset_description- A textual description of the asset.asset_domain- The domain associated with the asset.asset_enrichment- Additional enrichment data related to the asset.asset_id- The unique identifier of the asset.asset_info- Additional information about the asset.asset_ip- The IP address associated with the asset.asset_name- The name of the asset.asset_tags- Tags associated with the asset.asset_type- The type of the asset.asset_type_id- The unique identifier of the asset type.asset_uuid- The universally unique identifier of the asset.case_id- The unique identifier of the associated case.custom_attributes- Custom attributes associated with the asset.date_added- The date when the asset was added.date_update- The date when the asset was last updated.linked_ioc- Indicators of compromise linked to the asset.user_id- The identifier of the user associated with the asset.
Troubleshooting
- Ensure that the 'Case ID' and 'Asset Name or ID' are correctly specified to avoid errors during the update process.
- Verify that the 'Asset Type Name or ID' corresponds to an existing asset type to prevent invalid updates.
- If the 'Additional Fields' contain custom attributes or IOCs, ensure they are formatted correctly to avoid processing errors.