export_case
Export a detection case as a Markdown report or Timesketch-importable CSV to a chosen path or the case's exports folder; enable overwrite only when replacing an existing file.
Instructions
Export the case as a Markdown report ('markdown') or a Timesketch-importable CSV ('timesketch_csv'). Without a path the file goes in the case's exports/ folder. A path must end in .md or .csv and an existing file is only replaced with overwrite=true. Example: export_case(format="markdown")
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "export_case"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | ||
| format | No | markdown | |
| overwrite | No |