update_triage_rule
Modify an existing triage rule by ID to update its description, YARA rule content, search location, or organization associations for digital forensics and incident response.
Instructions
Update an existing triage rule by ID
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ID of the triage rule to update | |
| description | Yes | A descriptive name for the triage rule | |
| rule | Yes | The YARA rule content | |
| searchIn | Yes | Where to search, e.g., "filesystem" | |
| organizationIds | No | Organization IDs to associate with this rule. Defaults to [0] |