Set Triage Status

Updated 1 week ago by Elvis Hovor

Description

In the TruSTAR App for Demisto, this command sets the Phishing Triage status for the specified email.

This command is only available if you have enabled the Phishing Triage feature in TruSTAR.

Format

trustar-set-triage-status

Example

!trustar-set-triage-status submission_id=xxxx-yyyy-zzzzz status=CONFIRMED

Inputs

Argument

Description

Required

submission_id

The ID of the Intel Report created by TruSTAR after it processed an email submission.

Yes

status

Status to be applied to the email. Legal values are UNRESOLVED, CONFIRMED or IGNORED. You can only specify one value with this argument.

Yes

Output

None


How Did We Do?