Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Report → Update
AI-generatedSummary
Update an existing report with specified field values
Inputs
- reportId (required) — Identifier of the report to update; must be a non‑empty string
- updateFields — Collection of fields to update; each entry contains a field name and its new value
Output shape
a single Report object representing the updated report
The response returns the updated report record; fields not provided remain unchanged
Examples
Example 1: Update the name and published date of a report
Set Report ID to "rpt-123" and provide updateFields with name="Q2 Review" and published="2025-10-01T00:00:00Z".
Example 2: Modify confidence and content of a report
Provide updateFields with confidence=75 and content="Updated analysis of threat vectors".