Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Case → Update Case Summary
AI-generatedOverview
This node operation updates the summary or description of a specific case in the DFIR IRIS system. It is useful for users who need to modify or add details to an existing case record, such as updating the case description to reflect new findings or changes in the investigation status.
Use Case Examples
- Updating the description of a case to include recent analysis results.
- Correcting or enhancing the summary information of a case for better clarity.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case to be updated. This is required to specify which case's summary will be changed. |
| Case Description | The new description or summary text for the case. It must be at least 2 characters long and provides the updated details for the case. |
| Options | Additional optional settings for the update operation, such as whether to return the raw response from the API. |
Output
JSON
case_id- The identifier of the updated case.case_description- The updated description of the case.response- The raw or processed response from the update operation, depending on the 'Return Raw' option.
Dependencies
- Requires connection to the DFIR IRIS Incident Response Platform API, typically authenticated via an API key or token.
Troubleshooting
- Ensure the Case ID provided exists and is valid; otherwise, the update will fail.
- Verify that the Case Description meets the minimum length requirement (at least 2 characters).
- If the API returns an error, check the authentication credentials and network connectivity.
- If 'Return Raw' is enabled, the output may be complex; ensure you handle the raw data appropriately.