update_triage_rule
Modify an existing triage rule by ID to update its description, YARA rule content, search location, or associated organization IDs in Binalyze AIR MCP Server.
Instructions
Update an existing triage rule by ID
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| description | Yes | A descriptive name for the triage rule | |
| id | Yes | ID of the triage rule to update | |
| organizationIds | No | Organization IDs to associate with this rule. Defaults to [0] | |
| rule | Yes | The YARA rule content | |
| searchIn | Yes | Where to search, e.g., "filesystem" |
Input Schema (JSON Schema)
{
"properties": {
"description": {
"description": "A descriptive name for the triage rule",
"type": "string"
},
"id": {
"description": "ID of the triage rule to update",
"type": "string"
},
"organizationIds": {
"description": "Organization IDs to associate with this rule. Defaults to [0]",
"items": {
"oneOf": [
{
"type": "number"
},
{
"type": "string"
}
]
},
"type": "array"
},
"rule": {
"description": "The YARA rule content",
"type": "string"
},
"searchIn": {
"description": "Where to search, e.g., \"filesystem\"",
"type": "string"
}
},
"required": [
"id",
"description",
"rule",
"searchIn"
],
"type": "object"
}