Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Manage Metadata → Get Case States
AI-generatedOverview
This node operation retrieves the states of a specific case within the 'Manage Metadata' resource of the DFIR IRIS system. It is useful for users who need to fetch detailed state information about a case, such as its current status, description, and identifiers. For example, it can be used in incident response workflows to monitor case progress or to integrate case state data into reporting tools.
Use Case Examples
- Fetch all states of a case by providing the Case ID to track its progress.
- Retrieve specific fields of case states to display in a custom dashboard.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case for which the states are to be retrieved. This is a required numeric input. |
| Options | Additional options to customize the output, including whether to return the raw response, which fields to include or exclude in the output. |
Output
JSON
state_id- Identifier of the case state.state_name- Name of the case state.state_description- Description of the case state.protected- Indicates if the case state is protected.
Dependencies
- DFIR IRIS API authentication
Troubleshooting
- Ensure the Case ID is valid and exists in the system to avoid errors.
- If the API returns an error, check the API authentication credentials and network connectivity.
- If no states are returned, verify that the case has states recorded and that the correct fields are requested.