DFIR IRIS icon

DFIR IRIS

works with DFIR IRIS IRP

Actions85

Note Group → Update Note Group

AI-generated

Overview

This node updates a Note Group within a specified Case ID in the DFIR IRIS system. It allows users to modify the group by selecting the group to update and optionally changing its parent group or renaming it. This is useful for organizing and managing note groups in digital forensic and incident response cases.

Use Case Examples

  1. Updating the name of a note group within a specific case to better reflect its contents.
  2. Changing the parent group of a note group to reorganize the note hierarchy in a case.

Properties

Name Meaning
Case ID The identifier of the case to which the note group belongs. This is required to specify the context for the note group update.
Group Name or ID The identifier or name of the note group to update. Users can select from existing groups or specify an ID directly.
Additional Fields Optional fields to update on the note group, including the parent group ID and the new group name.
Options Additional options for the update operation, such as whether to return the raw response from the API.

Output

JSON

  • id - The unique identifier of the updated note group.
  • name - The updated name of the note group.
  • parent_id - The identifier of the parent group after the update.
  • case_id - The identifier of the case to which the note group belongs.

Dependencies

  • Requires connection to the DFIR IRIS API with appropriate authentication credentials.

Troubleshooting

  • Ensure the Case ID and Group Name or ID are valid and exist in the system to avoid errors.
  • If the update fails, check that the user has sufficient permissions to modify note groups in the specified case.
  • If the 'Return Raw' option is enabled, the output will be the raw API response which may require additional parsing.

Discussion