Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Course of Action → Update
AI-generatedSummary
Update a Course of Action by ID with specified fields.
Inputs
- courseOfActionId (required) — The unique identifier of the Course of Action to update.
- updateFields — Collection of fields to update; includes description and name.
Output shape
a single Course of Action object
Returns the updated Course of Action; may include warning if no changes were applied.
Examples
Example 1: Update name and description of a Course of Action with ID 123
courseOfActionId: 123, updateFields: {name: "New Name", description: "Updated description"}
Example 2: Apply only a new name to a Course of Action
courseOfActionId: "abc-456", updateFields: {name: "Revised Title"}
Example 3: Leave fields unchanged (only ID provided)
courseOfActionId: "xyz-001", updateFields: {}