DFIR IRIS icon

DFIR IRIS

works with DFIR IRIS IRP

Actions85

Note → Update

AI-generated

Overview

This node updates an existing note within a specified case in the DFIR IRIS system. It allows users to modify the note's title, content, and additional fields such as the parent group and custom attributes. This is useful for managing and maintaining detailed notes related to digital forensic and incident response cases, ensuring that information is kept current and accurate.

Use Case Examples

  1. Updating the title and content of a note associated with a specific case ID.
  2. Adding custom attributes or changing the parent group of a note to better organize case documentation.

Properties

Name Meaning
Case ID The unique identifier of the case to which the note belongs. This is required to specify the context for the note update.
Note Name or ID The identifier or name of the note to update. Users can select from a list or specify an ID using an expression. This is required to identify which note to update.
Note Title The new title for the note. This is a required field to update the note's title.
Note Content The new content or body of the note. This is a required field to update the note's content.
Additional Fields Optional fields to further customize the note update, including the parent group (directory) and custom attributes.
Options Additional options to control the output of the update operation, such as returning the raw response or specifying which fields to include or exclude in the response.

Output

JSON

  • custom_attributes - Custom attributes of the updated note.
  • directory - Directory or group information of the note.
  • directory_id - ID of the directory or group the note belongs to.
  • modification_history - History of modifications made to the note.
  • note_case_id - ID of the case associated with the note.
  • note_content - Content of the note.
  • note_creationdate - Creation date of the note.
  • note_id - Unique identifier of the note.
  • note_lastupdate - Timestamp of the last update to the note.
  • note_title - Title of the note.
  • note_user - User who created or last modified the note.
  • note_uuid - UUID of the note.

Dependencies

  • Requires API authentication credentials to connect to the DFIR IRIS system.

Troubleshooting

  • Ensure the Case ID and Note ID are correct and exist in the system to avoid 'not found' errors.
  • Verify that all required fields (Note Title and Note Content) are provided to prevent validation errors.
  • If the API returns an error, check the network connection and API credentials for validity.

Discussion