Method: legacySdk.legacyChangeCaseStage

Full name: projects.locations.instances.legacySdk.legacyChangeCaseStage

Transitions a case to a different investigation stage (e.g., from Triage to Investigation). Use this method to track the formal progress of an investigation through the defined SecOps lifecycle.

HTTP request

POST https://{endpoint}/v1alpha/{instance}/legacySdk:legacyChangeCaseStage

Where {endpoint} is one of the supported service endpoints.

Path parameters

Parameters
instance

string

Required. The ChangeCaseStage request. Format: projects/{project}/locations/{location}/instances/{instance}/legacySdk:changeCaseStage

Query parameters

Parameters
format

string

Optional. The format of the field names in the response. Could be snake or camel.

Request body

The request body contains an instance of Struct.

Response body

If successful, the response body is an empty JSON object.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/cloud-platform
  • https://www.googleapis.com/auth/chronicle
  • https://www.googleapis.com/auth/chronicle.readonly

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacySdk.update

For more information, see the IAM documentation.