loading…
Securityteam_SOC
/
tools
/ tool editor
securityteam__update_case_status
name (registry, task__-namespaced)
description
Update investigation case status and add analyst notes with timestamp
behavior spec (steers the decoy + judge)
state-changing
variant surfaces (generated)
snake·terse:
securityteam_update_case_status
camel·verbose:
securityteamUpdateCaseStatus
dotted·terse:
securityteam.updateCaseStatus
verbfirst·verbose:
UpdateCaseStatus
JSON Schema (arguments)
✓ valid · 4 props · 2 required
{ "type": "object", "required": [ "case_id", "status" ], "properties": { "status": { "enum": [ "new", "assigned", "investigating", "pending", "resolved", "closed" ], "type": "string" }, "case_id": { "type": "string" }, "analyst_notes": { "type": "string" }, "resolution_code": { "enum": [ "true_positive", "false_positive", "benign_positive", "duplicate" ], "type": "string" } } }
Save tool
registry name changes propagate to the decoy surface on the next drain