Overview

This node operation allows users to add a new Note Group within a specified case in the DFIR IRIS system. It is useful for organizing notes related to a particular case by grouping them logically. For example, a user can create a Note Group named 'Investigation Findings' under a specific case ID to categorize related notes.

Use Case Examples

1. Create a Note Group named 'Investigation Findings' for case ID 12345 to organize notes related to the investigation.
2. Add a Note Group with a parent group to create a hierarchical structure of note groups within a case.

Properties

Output

JSON

• id - The unique identifier of the newly created Note Group.
• name - The name of the created Note Group.
• parent_id - The identifier of the parent Note Group if specified.
• case_id - The identifier of the case to which the Note Group belongs.

Dependencies

• Requires connection to the DFIR IRIS system with appropriate API credentials to authenticate and perform the Note Group creation.

Troubleshooting

• Ensure the Case ID provided exists and is accessible with the current credentials; otherwise, the operation will fail.
• The Group Name must be unique or valid according to the DFIR IRIS system rules; duplicate or invalid names may cause errors.
• If specifying a Parent Group, ensure the Parent Group ID or name is correct and belongs to the same case to avoid hierarchy errors.
• If the API returns an error, check the 'Return Raw' option to get detailed response information for debugging.