Security Case

Get Security Case

Endpoint to retrieve a single Security Case by ID

post/security-case/{id}/get-item

Request

Path parameters

idstring uuid required

ID of the Security Case to retrieve

Request body

Example request

{
  "select": {
    "_id": true,
    "createdAt": true,
    "updatedAt": true,
    "caseNumberWithPrefix": true,
    "verdict": true,
    "source": true,
    "aiVerdict": true
  }
}

Response

Successful response

Example response

{
  "data": {
    "_id": "123e4567-e89b-12d3-a456-426614174000",
    "createdAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "updatedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "deletedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "version": 42,
    "projectId": "123e4567-e89b-12d3-a456-426614174000",
    "caseNumber": 42,
    "caseNumberWithPrefix": "Example short text",
    "title": "This is an example of longer text content that might be stored in this field.",
    "description": "# Heading\n\nThis is **markdown** content",
    "securityCaseStatusId": "123e4567-e89b-12d3-a456-426614174000",
    "securityCasePriorityId": "123e4567-e89b-12d3-a456-426614174000",
    "verdict": "True Positive",
    "closingNote": "# Heading\n\nThis is **markdown** content",
    "assignedToUserId": "123e4567-e89b-12d3-a456-426614174000",
    "assignedToTeamId": "123e4567-e89b-12d3-a456-426614174000",
    "source": "Detection Rule",
    "entities": {
      "key": "value",
      "nested": {
        "data": 123
      }
    },
    "mitreTactics": {
      "key": "value",
      "nested": {
        "data": 123
      }
    },
    "mitreTechniques": {
      "key": "value",
      "nested": {
        "data": 123
      }
    },
    "customFields": {
      "key": "value",
      "nested": {
        "data": 123
      }
    },
    "detectionCount": 42,
    "firstDetectedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "lastDetectedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "acknowledgedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "containedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "closedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "acknowledgeDueAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "containDueAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "acknowledgeWarnedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "acknowledgeMissedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "containWarnedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "containMissedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "nextDueAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "nextTargetCheckAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "closedByUserId": "123e4567-e89b-12d3-a456-426614174000",
    "groupingKey": "This is an example of longer text content that might be stored in this field.",
    "notifiedSecurityCasePriorityId": "123e4567-e89b-12d3-a456-426614174000",
    "incidentId": "123e4567-e89b-12d3-a456-426614174000",
    "aiVerdict": "Likely Malicious",
    "aiSuggestedSecurityCasePriorityId": "123e4567-e89b-12d3-a456-426614174000",
    "aiSuggestedPlaybookId": "123e4567-e89b-12d3-a456-426614174000",
    "aiTriageReport": "# Heading\n\nThis is **markdown** content",
    "aiTriagedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "aiTriagePromptInjectionSuspected": true,
    "labels": [
      {
        "_id": "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
      }
    ],
    "createdByUserId": "123e4567-e89b-12d3-a456-426614174000",
    "deletedByUserId": "123e4567-e89b-12d3-a456-426614174000"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.