acquire_baseline
Assign a baseline acquisition task to specific endpoints using filters like asset name, IP address, or platform, associated with a case ID for forensics and incident response in Binalyze AIR.
Instructions
Assign a baseline acquisition task to specific endpoints
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| caseId | Yes | The case ID to associate the baseline acquisition with | |
| filter | Yes | Filter object to specify which assets to acquire baseline from |