Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Individual → Update
AI-generatedSummary
Update an existing individual by ID with specified field values.
Inputs
- individualId (required) — Identifier of the individual to update.
- updateFields — Object containing the fields to update for the individual; may include contact_information, description, x_opencti_firstname, x_opencti_lastname, and name.
Output shape
a single updated individual object
The response returns the updated individual record, reflecting the provided fields; unchanged fields are retained.
Examples
Example 1: Update an individual’s contact information
Set individualId to '12345' and updateFields.contact_information to 'john.doe@example.com'
Example 2: Update the name and description of an individual
Set individualId='abc' and updateFields.name='John Doe', updateFields.description='Updated bio'