DFIR IRIS icon

DFIR IRIS

works with DFIR IRIS IRP

Module → List Available Modules

AI-generated

Overview

This node interacts with the DFIR IRIS Incident Response Platform to list available modules. It is useful for users who want to retrieve and view the modules that can be accessed or managed within the DFIR IRIS system. For example, security analysts can use this node to dynamically fetch and display modules related to cases, assets, events, or tasks for further automation or investigation workflows.

Use Case Examples

  1. A security analyst uses the node to list all available modules before selecting one to query case details.
  2. An automation workflow fetches available modules to dynamically populate options in a user interface.

Properties

Name Meaning
Case ID The unique identifier of the case to operate on. Required for operations that need case context.

Output

JSON

  • modules - List of available modules retrieved from the DFIR IRIS platform.

Dependencies

  • Requires connection to DFIR IRIS Incident Response Platform API with appropriate authentication credentials.

Troubleshooting

  • Ensure the Case ID is provided and valid when required; missing or incorrect IDs will cause errors.
  • Verify API credentials and network connectivity to DFIR IRIS platform to avoid authentication or connection failures.
  • If the 'Return Raw' option is enabled, the output will be the raw API response which may require additional parsing.

Discussion