Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Manage Metadata → Get Severities
AI-generatedOverview
This node operation retrieves severity information related to a specific case in the DFIR IRIS system. It is useful for digital forensics and incident response workflows where understanding the severity levels of cases is important. For example, a security analyst might use this operation to fetch and analyze severity details of a case to prioritize response actions.
Use Case Examples
- Fetch severity details for a given case ID to assess the impact and urgency of the incident.
- Retrieve specific fields of severity data to integrate with a reporting dashboard.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case for which severity information is requested. This is a required numeric input. |
| Options | Additional options to customize the output, including whether to return the raw response, which fields to include or exclude in the output. |
Output
JSON
severity_description- Description of the severity level.severity_id- Identifier of the severity level.severity_name- Name of the severity level.
Dependencies
- DFIR IRIS API authentication
Troubleshooting
- Ensure the Case ID is valid and exists in the DFIR IRIS system to avoid errors.
- If the API returns an error, check the API authentication credentials and network connectivity.
- If no severities are returned, verify that the case has associated severity data.