Update analyst-controlled threat fields
| Field | Type | Description |
|---|---|---|
title | string | Override title |
description | string | Analyst-edited description |
severity | string | New severity |
status | string | New status |
dismissal_reason | string | Required when setting status=dismissed |
pinned | boolean | Pin or unpin the threat |
sources | string[] | Replace source labels |
attribution_types | string[] | Replace attribution labels |
false_positiveduplicateout_of_scopealready_resolvedcritical, high, medium, low, negligible active, monitoring, contained, resolved, dismissed, ended false_positive, duplicate, out_of_scope, already_resolved Updated threat.
critical, high, medium, low, negligible active, monitoring, contained, resolved, dismissed, ended