threatmonitoring

Reopens a closed threat, identified by UUID, and places it back into the investigating state. The user identified by investigator_email is assigned as the investigator; they must belong to your organization and have write permission for Threat Monitoring.

The threat can only be reopened if: it is currently closed; and it is not linked to a remediation request.

Required API key permissions: BreachRisk (select when creating API key in Account Settings)

post/threatmonitoring/threat/reopen

Request

Query parameters

uuidstring uuid required

The unique identifier of the threat to reopen

investigator_emailstring required

The email address of the user to assign as the investigator on reopen. The user must belong to your organization and have write permission for Threat Monitoring.

Response

The reopened threat

statusstring

The status of the threat after reopening

uuidstring

The UUID of the threat that was reopened

Changes