Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Case → Export
AI-generatedOverview
This node interacts with the DFIR IRIS Incident Response Platform to export case data based on a specified Case ID. It is useful for users who need to retrieve detailed information or reports about a particular case from the DFIR IRIS system for further analysis, reporting, or archival purposes.
Use Case Examples
- Exporting a case report by providing the Case ID to retrieve all associated data for incident investigation.
- Automating the extraction of case details to integrate with other security tools or dashboards.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case to be exported. This is a required numeric input used to specify which case's data should be retrieved. |
Output
JSON
caseData- The exported data of the specified case, containing all relevant information retrieved from the DFIR IRIS platform.
Dependencies
- Requires connection to the DFIR IRIS Incident Response Platform, typically via an API key or authentication token configured in the node credentials.
Troubleshooting
- Ensure the Case ID provided is valid and exists in the DFIR IRIS system to avoid errors related to missing or invalid case references.
- Check that the API credentials for DFIR IRIS are correctly configured and have sufficient permissions to export case data.
- Network connectivity issues between n8n and the DFIR IRIS platform can cause failures; verify network access and firewall settings.
Links
- DFIR IRIS Official Website - Official site for the DFIR IRIS Incident Response Platform, providing documentation and support resources.