Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Comment → Delete
AI-generatedOverview
This node operation deletes a specific comment associated with a given object within a case in the DFIR IRIS system. It is useful for managing and maintaining case-related data by removing outdated or irrelevant comments. For example, a security analyst might use this node to delete a comment on a task or evidence object within a case to keep the case information current and accurate.
Use Case Examples
- Deleting a comment from a task object in a case to remove obsolete information.
- Removing a comment from an evidence object to correct or update case documentation.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case to which the comment belongs. |
| Object Name | The type of object the comment is associated with, such as Alert, Asset, Event, Evidence, IOC, Note, or Task. |
| Object ID | The unique identifier of the object to which the comment is attached. |
| Comment ID | The unique identifier of the comment to be deleted. |
| Options - Return Raw | Whether to return the raw response from the API after deleting the comment. |
Output
JSON
success- Indicates whether the comment deletion was successful.message- Additional information or confirmation message about the deletion.
Dependencies
- Requires API authentication credentials to connect to the DFIR IRIS system.
Troubleshooting
- Ensure the Case ID, Object Name, Object ID, and Comment ID are correct and correspond to existing entities in the system to avoid errors.
- If the comment cannot be deleted, check user permissions and API access rights.
- If the 'Return Raw' option is enabled, the output will contain the raw API response which might require additional parsing.