Software Secure Workload
Activity Configure

Update a Forensic Rule

PUT /openapi/v1/inventory_config/forensic_rules/{rule_id}

Parameters:

Name

Type

Description

rule_id

string

id of the rule

name

string

name of the rule

description

string

description of the rule

eval_group_type

string

type of the rule

severity

string

severity of the rule

actions

array

array or ALERT or REPORT strings

clause

string

the query clause of the rule.

Returns a forensic rule object.