Skip to main content

Update Incident Details Of An Alert

Update the incident details of an alert.

Parameters

ParameterDescription
Alert IDsA list of alerts IDs to update their analyst verdict.
New Incident StatusThe new incident status.Options:
in_progressresolvedunresolved

Example Output

{
"errors": [
{
"type": "object"
}
],
"data": {
"affected": "integer"
}
}

Workflow Library Example

Update Incident Details of an Alert with Sentinelone and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop