Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Note Group → Get Many
AI-generatedOverview
This node operation retrieves multiple note groups associated with a specified Case ID. It is useful in scenarios where you need to fetch all note groups related to a particular case for digital forensic and incident response (DFIR) investigations. For example, a security analyst might use this to gather all note groups linked to a case to review collected evidence or annotations.
Use Case Examples
- Retrieve all note groups for a given Case ID to analyze case-related notes.
- Fetch note groups to export or process case documentation.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case for which note groups are to be retrieved. This is a required numeric input. |
Output
JSON
noteGroups- An array of note group objects retrieved for the specified Case ID.rawResponse- The raw response from the API if the 'Return Raw' option is enabled.
Dependencies
- Requires connection to the DFIR IRIS Incident Response Platform API with appropriate authentication.
Troubleshooting
- Ensure the Case ID is valid and exists in the system; invalid or non-existent Case IDs will result in errors or empty responses.
- If 'Return Raw' is enabled, the output will be the raw API response which might require additional parsing.
- Network or authentication issues may cause failures; verify API credentials and connectivity.