Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
City → Update
AI-generatedSummary
Update a City record in OpenCTI by setting specified fields.
Inputs
- cityId (required) — The unique identifier of the City to update.
- updateFields (required) — Fields to update, such as description and name, provided as key‑value pairs.
Output shape
a single updated City object
The response contains the updated City record; optional fields may be omitted if unchanged.
Examples
Example 1: Patch the city named 'Paris' with a new description.
cityId: 'city_123', updateFields: {description: 'Capital of France', name: 'Paris'}