Update one incident's investigation state
One step with Acronis. We can help you get access.
Get something done
Update one incident's investigation state
with Acronis
Use Acronis: its Endpoint Detection and Response (EDR) Incidents API lets you update one incident's investigation state in a single step (POST /incidents/{incident_id}/investigation_state). capabilities.work can help you get signed up and connected.
- How do I move a single incident to a new investigation state with a comment?
- Can I link an incident to my external ticket and assignee?
Say it to your AI assistant
- Set incident {incident_id} investigation state to {state}.
- Comment {comment} on incident {incident_id}.
- Attach ticket {ticket_id} assigned to {assignee} to incident {incident_id}.
For your developer
POST /incidents/{incident_id}/investigation_state in Endpoint Detection and Response (EDR) Incidents API. Full spec on APIs.io.