Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
External Reference → Update
AI-generatedSummary
Updates an existing external reference with specified fields.
Inputs
- externalReferenceId (required) — The unique identifier of the external reference to update.
- updateFields — Collection of fields to update, such as description, external_id, source_name, or url.
Output shape
a single updated ExternalReference object
Returns the updated reference; optional fields may be omitted, and errors are propagated as node failures.
Examples
Example 1: Update description and URL of an external reference
Set externalReferenceId to "123", updateFields to {"description":"New desc","url":"https://example.com"}
Example 2: Update only external ID
externalReferenceId: "456", updateFields: {"external_id":"new-id"}