Get Playbook by ID

Example response

{
  "contributors": [
    "['John Doe'",
    " 'Jane Smith']"
  ],
  "createTime": "2024-11-14T15:03:22Z",
  "created": "2023-10-01T12:00:00Z",
  "description": "This is a sample playbook",
  "detection_category": "process_creation",
  "detection_id": "ac5856cd-7e4c-4a61-8b15-6fc9148ff7f2",
  "id": "PdFc-JIBLkNJ8-bDfz47",
  "kind": "case",
  "modified": "2023-10-01T12:00:00Z",
  "name": "Sample Playbook",
  "operation": "create",
  "questions": [
    {
      "context": "Knowing if the attack comes from inside or outside the network can help determine if this is a false positive or a real attack.",
      "queryResults": [
        {
          "id": "ru5Jk5MB4OVrR03M8ee8",
          "payload": {
            "@timestamp": "2024-12-04T20:06:04.725Z",
            "@version": "1",
            "client.ip": "4.33.51.1",
            "client.port": "5544"
          },
          "sort": [
            "0:33.32.12.56"
          ],
          "source": "so:.ds-logs-zeek-so-2024.11.21-000017",
          "time": "2024-12-04T20:08:15.97Z",
          "timestamp": "2024-12-04T20:08:15.970Z"
        }
      ],
      "question": "What is the source IP address of the alert?",
      "range": "+/-3d"
    }
  ],
  "updateTime": "2024-11-14T15:33:02Z",
  "userId": "socl_my_new_client"
}