sophos_update_case
Update an existing case's name, type, severity, status, assignee, or overview to reflect the current investigation state.
Instructions
Update an existing case (name, type, severity, status, assignee, overview).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Updated case name | |
| type | No | Updated case type | |
| status | No | Updated status (e.g. 'new', 'investigating', 'onHold', 'resolved') | |
| case_id | Yes | Case UUID | |
| assignee | No | Updated assignee email | |
| overview | No | Updated overview/description text | |
| severity | No | Updated severity (e.g. 'notSet', 'high', 'critical') | |
| tenant_id | Yes | Tenant UUID |