Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Case → Delete
AI-generatedOverview
This node operation deletes a specified case in the DFIR IRIS system. It is useful for managing and cleaning up cases that are no longer needed or were created in error. For example, a security analyst might use this operation to remove a resolved or duplicate case from the system.
Use Case Examples
- Deleting a case by providing its unique Case ID to remove it from the system.
- Automating case management workflows by deleting cases that meet certain criteria.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case to be deleted, required to specify which case to remove. |
| Options | Additional options for the delete operation, such as whether to return the raw response from the API. |
Output
JSON
success- Indicates whether the case was successfully deleted.message- A message providing additional information about the deletion result.
Dependencies
- Requires connection to the DFIR IRIS system with appropriate API credentials to authenticate and authorize the delete operation.
Troubleshooting
- Ensure the Case ID provided is valid and exists in the system; an invalid ID will cause the deletion to fail.
- Check API credentials and permissions to confirm the user has rights to delete cases.
- If the 'Return Raw' option is enabled, the output may be unprocessed and require additional handling.