Change the verdict of a threat, as determined by a Console user.

​
Parameters

ParameterDescription
New Analyst VerdictThe new analyst verdict.Options: false_positivesuspicioustrue_positiveundefined
Threats IDsList of threats IDs to update their analyst verdict.

​
Example Output

{
	"errors": [
		{
			"type": "object"
		}
	],
	"data": {
		"affected": "integer",
		"details": [
			{
				"result": "updated",
				"threatId": "225494730938493804"
			}
		]
	}
}

​
Workflow Library Example

Update Threat Analyst Verdict with Sentinelone and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?