--- title: "Update Security Case Evidence" method: PUT path: "/security-case-evidence/{id}" tags: ["Security Case Evidence"] --- # Update Security Case Evidence `PUT /security-case-evidence/{id}` ## Request - Base URL: `https://oneuptime.com/api` - URL: `https://oneuptime.com/api/security-case-evidence/{id}` - Auth: API key in header `APIKey` - TypeScript: (a function with typed inputs; its response is checked against the schema) Endpoint to update an existing Security Case Evidence ## Path parameters - `id` string, uuid, required ## Request body - object - `data` SecurityCaseEvidenceUpdateSchema, required: Update schema for SecurityCaseEvidence model. Update - `name` string: What the evidence is, in a few words. A file's own name when none is given. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [Project Owner, Project Admin, Security Admin, Security Member, Edit Security Case Evidence] - `description` string: What the evidence shows, and where and how it was collected. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [Project Owner, Project Admin, Security Admin, Security Member, Edit Security Case Evidence] ## Response `200` Updated successfully - object - `data` SecurityCaseEvidenceReadSchema: Read schema for SecurityCaseEvidence model. Read - `_id` string, uuid: ID of this object. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [Project Owner, Project Admin, Security Admin, Security Member, Edit Security Case Evidence] - `createdAt` object: Date and Time when the object was created. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [Project Owner, Project Admin, Security Admin, Security Member, Edit Security Case Evidence] - `updatedAt` object: Date and Time when the object was updated. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [Project Owner, Project Admin, Security Admin, Security Member, Edit Security Case Evidence] - `deletedAt` object: Date and Time when the object was deleted. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [Project Owner, Project Admin, Security Admin, Security Member, Edit Security Case Evidence] - `projectId` string, uuid: ID of the project this evidence belongs to. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `securityCaseId` string, uuid, required: ID of the case this evidence is kept on. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `kind` 'File' | 'Link' | 'Event', required: What the evidence is: a File uploaded to OneUptime, a Link to evidence kept somewhere else, or an Event bookmarked from Security Events. It can't be changed. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `name` string, required: What the evidence is, in a few words. A file's own name when none is given. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [Project Owner, Project Admin, Security Admin, Security Member, Edit Security Case Evidence] - `description` string: What the evidence shows, and where and how it was collected. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [Project Owner, Project Admin, Security Admin, Security Member, Edit Security Case Evidence] - `fileId` string, uuid: ID of the uploaded file, for File evidence: upload it first, then name it here. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `url` string: Where the evidence is kept, for Link evidence: an http or https address. Permissions - Create: [Project Owner, Project Admin, Security Admin, Security Member, Create Security Case Evidence], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `fileName` string: The file's name as it was uploaded, for File evidence. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `fileType` string: The file's type as it was uploaded, like text/plain. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `fileSizeInBytes` number: The file's size as it was uploaded, in bytes. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `sha256` string: The SHA-256 of the file's bytes as they were uploaded, in hex: compare it with a download's to check it is what was kept. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `eventUid` string: For Event evidence: the security event's ID, as its source gave it. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `eventTime` object: For Event evidence: when the security event happened. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `eventSnapshot` object: For Event evidence: the security event as OneUptime read it when it was kept - its severity, class, message, who and where - and the hunt that found it. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `createdByUserId` string, uuid: ID of the person who added the evidence. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] - `deletedByUserId` string, uuid: ID of the person who removed the evidence. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Evidence], Update: [No access - you don't have permission for this operation] ## Other responses - `400`: Bad request. This response indicates that the request was malformed or contained invalid data. - `401`: Unauthorized. This response indicates that the request requires user authentication. - `402`: Payment Required. This response indicates that the request requires payment or a valid subscription. - `403`: Forbidden. This response indicates that the server understood the request, but refuses to authorize it. - `404`: Not found. The record does not exist, belongs to another project, or is one you may not read - the same answer for each. - `405`: Project not found. This response indicates that the requested project does not exist or is not accessible. - `408`: Request Timeout. This response indicates that the server timed out waiting for the request. - `415`: Unable to reach server. This response indicates that the server is currently unreachable or down. - `422`: Not authorized. This response indicates that the user does not have permission to access the requested resource. - `500`: Internal Server Error. This response indicates that the server encountered an unexpected condition that prevented it from fulfilling the request. --- [API](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification.md) - [All operations](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification/revisions/ba3307d00304?raw)