Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Infrastructure → Update
AI-generatedSummary
Update an existing infrastructure record with specified fields.
Inputs
- infrastructureId (required) — ID of the infrastructure to update.
- updateFields — Fields to update on the infrastructure, such as description, name, first_seen, and last_seen.
Output shape
a single updated infrastructure object
The response returns the updated infrastructure record; optional fields may be omitted; errors are propagated as node errors.
Examples
Example 1: Update an existing infrastructure with new name and description
infrastructureId: "5a7b9c", updateFields: { name: "New Office", description: "Main office in New York" }
Example 2: Mark an infrastructure with first and last seen timestamps
infrastructureId: "123", updateFields: { first_seen: "2023-01-01T00:00:00Z", last_seen: "2023-09-30T23:59:59Z" }