Skip to main content

Update Incident Details Of An Alert

Update the incident details of an alert.

Parameters​

ParameterDescription
Alert IDsA list of alerts IDs to update their analyst verdict.
New Incident StatusThe new incident status.
Options:
<br/>in_progress<br/>resolved<br/>unresolved<br/>

Example Output​

{
    "errors": [
        {
            "type": "object"
        }
    ],
    "data": {
        "affected": "integer"
    }
}

Workflow Library Example​

Update Incident Details of an Alert with Sentinelone and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop