Update case by case name or ID.

Basic Parameters

ParameterDescription
AssigneeThe username of the analyst this resource should be assigned to.
Case Name or IDThe name or the ID of the case.
StatusThe status of the resource.
TitleA short, descriptive title for the resource.

Advanced Parameters

ParameterDescription
Add TagsThose tags will be added to the current case.
Custom FieldsCustom fields as an array of objects.For more information about the Custom Fields parameter, visit TheHive API documentation.
DescriptionThe main detailed description and context for the resource.
End Date-
FlagSet to true to visually flag the resource in the user interface for attention.
Impact Status-
Observable Rule-
PAPPrioritized Asset Profile, the severity level that is used to indicate the importance of an asset.White: The asset is not critical.Green: The asset is important, but not critical.Amber: The asset is critical.Red: The asset is essential.
Remove TagsThose tags will be removed from the current case.
SeverityThe severity level of the resource.
Start Date-
SummaryA brief summary of the resource.
TLPTraffic Light Protocol, a set of designations used to ensure that sensitive information is shared with the appropriate audience.CLEAR: unlimited formerly.GREEN: community-wide.AMBER: limited distribution.AMBER+STRICT: restricts sharing to the organization only.RED: personal for named recipients only.
TagsSet the case tags to this array.
Task Rule-

Workflow Library Example

Update Case with Thehive and Send Results Via Email

Preview this Workflow on desktop