Assign Investigator

This command can only be executed in the "On Event Ingestion" trigger within an event playbook. Assign a specific investigator to an event.

Reader Note

Please note that this command is only applicable within an event Playbook.

Inputs

Parameter Name	Required/Optional	Description	Sample Data
User Name	Required	The name of investgator	`user1`

Raw Data

The response data from the utility command.

SAMPLE DATA

JSON

{
    "result": "Successful",
    "errors": []
}

The D3 command API allows you to send requests to D3 SOAR to execute this utility command via REST API.

POST

CODE

https://{base_url}/{api_namespace}//api/Command/assignInvestigator

JSON

{
  "Username": <Username here>,
  "Site": <Site here>,
  "CommandParams": {
    "User Name": <Username here>
  }
}

Parameter Name	Type	Required/Optional	Description
Username	`String`	Required	The username of your D3 SOAR account.
Site	`String`	Required	The D3 SOAR site to run the remote command.
User Name	`Text`	Required	The name of investgator

SAMPLE DATA

JSON

{
  "Username": "Admin",
  "Site": "Security Operations",
  "CommandParams": {
    "User Name": "user1"
  }
}

Field Name	Type	Description
error	`String`	The error message if the API request has failed.
rawData	`JSON Object`	The raw data from the API request.

JSON

{
    "error": "",
    "returnData": "",
    "rawData": {
        "result": "Successful",
        "errors": []
    }
}