Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Observable → Update
AI-generatedSummary
Update an Observable with new field values
Inputs
- observableId (required) — The ID of the observable to update
- updateFields — Fields to update on the observable, provided as key-value pairs
Output shape
a single updated Observable
Returns the updated observable record; errors are propagated
Examples
Example 1: Update an observable's description and score
observableId: "abc123", updateFields: {"x_opencti_description": "Critical threat", "x_opencti_score": 90}