Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Comment → Get Many
AI-generatedOverview
The 'DFIR IRIS' n8n node facilitates interaction with the DFIR IRIS Incident Response Platform, enabling users to retrieve multiple comments associated with a specific case.
Use Case Examples
- Retrieving all comments related to a particular case in DFIR IRIS for analysis.
- Extracting comments from a case to generate a report on incident responses.
Properties
| Name | Meaning |
|---|---|
| cid | The unique identifier of the case from which comments are to be fetched. |
| obj_name | The type of object associated with the comments, such as 'alert', 'assets', 'events', 'evidences', 'ioc', 'notes', or 'tasks'. |
Output
JSON
comments- An array of comment objects, each containing details such as comment date, ID, text, update date, UUID, user, and associated object name.
Dependencies
- DFIR IRIS API Key
- DFIR IRIS Base URL
Troubleshooting
- Ensure that the 'cid' and 'obj_name' parameters are correctly set to match existing case and object types in DFIR IRIS.
- Verify that the DFIR IRIS API Key and Base URL are correctly configured in the node's credentials.
- Check for network connectivity issues that might prevent access to the DFIR IRIS platform.
Links
- DFIR-IRIS Credentials Documentation - Guidance on setting up credentials for DFIR IRIS in n8n.
- AWS S3 and Iris DFIR Integration - An example of integrating AWS S3 with Iris DFIR using n8n.