Body Required

• agent_type string

  Values are endpoint, sentinel_one, or crowdstrike.

• alert_ids array[string]

  A string that is not empty and does not contain only whitespace

  At least 1 element. Minimum length of each is 1. Format of each should match the following pattern: ^(?! *$).+$.

• case_ids array[string]

  Case IDs to be updated (cannot contain empty strings)

  At least 1 element. Minimum length of each is 1.

• comment string

  Optional comment

• endpoint_ids array[string] Required

  List of endpoint IDs (cannot contain empty strings)

  At least 1 element. Minimum length of each is 1.

• parameters object Required

  One of:

  Security_Endpoint_Management_API_Pid object Security_Endpoint_Management_API_EntityId object object-3 object

  Hide attribute Show attribute

  • pid integer

    Minimum value is 1.

  Hide attribute Show attribute

  • entity_id string

    Minimum length is 1.

  Hide attribute Show attribute

  • process_name string

    Valid for SentinelOne agent type only

    Minimum length is 1.