latestSwagger 2.02026-08-109450223.9 KB
94acb422c07d
Reseller
Create an Incident Report Resolution
Use this endpoint to resolve a single Incident Report. All remediations belonging to the Incident Report must be approved first.
While resolution updates the report status to resolved, assisted remediations may still be running in the background and manual remediations may still require completion by a user.
This endpoint requires an API key with permissions to resolve incident reports. Note that the default account API key is read-only, so you'll need to create a user-based API key with the appropriate permissions to access this endpoint.
post/v1/accounts/{account_id}/incident_reports/{id}/resolution
Path parameters
account_idinteger required
idinteger required
Response
Create an Incident Report Resolution
Example response
{
"incident_report": {
"id": 1,
"account_id": 5,
"agent_id": 12,
"body": "<Content>",
"closed_at": "2022-03-15T14:22:00Z",
"indicator_counts": {
"footholds": 1,
"monitored_files": 0,
"process_detections": 0,
"ransomware_canaries": 0,
"antivirus_detections": 0
},
"indicator_types": [
"footholds"
],
"organization_id": 4,
"platform": "windows",
"remediations": {
"total_count": 1,
"has_more": false,
"items": [
{
"id": 1,
"type": "manual",
"action": "Delete File",
"parameters": [
{
"name": "path",
"description": "c:\\windows\\system32\\tasks\\malicious_task"
}
],
"status": "completed",
"approved_at": "2025-06-26T18:57:03Z",
"approved_by": {
"id": "123123",
"email": "john.smith@example.com",
"name": "John smith"
},
"completed_at": "2025-06-26T18:57:03Z"
}
]
},
"sent_at": "2022-03-01T21:00:00Z",
"severity": "low",
"status": "closed",
"status_updated_at": "2022-03-15T14:22:00Z",
"subject": "LOW - Incident on laptop01 (Test)",
"summary": "Huntress detected a malicious scheduled task on this host. We recommend removing the file and scheduled task listed in the remediation steps below.",
"updated_at": "2022-03-01T20:31:30Z"
}
}