---
title: "Retrieve CaseAttributes"
method: GET
path: "/v3/caseAttributes"
tags: ["Case Attributes"]
---

# Retrieve CaseAttributes

`GET /v3/caseAttributes`

Returns a list of all CaseAttributes

## Query parameters

- `tql` string
- `fields` string[]
- `count` string
- `sorting` string

## Response `200`

The CaseAttributes

- CaseAttributeData[]
  - `id` integer
  - `dateAdded` string, date-time
  - `securityLabels` ListEntitySecurityLabel
    - `data` SecurityLabel[]
      - `id` integer
      - `name` string, required
      - `description` string
      - `color` string
      - `owner` string
      - `dateAdded` string, date-time
      - `victims` ListEntityVictim
        - `data` Victim[]
          - `id` integer
          - `dateAdded` string, date-time
          - `securityLabels` ListEntitySecurityLabel — recursive
          - `ownerId` integer
          - `ownerName` string
          - `webLink` string
          - `tags` ListEntityTag
            - `data` Tag[]
              - …
            - `count` integer
            - `countSuccess` integer
            - `countFailure` integer
            - `count_type` string
            - `next` string
            - `prev` string
            - `mode` string
          - `name` string, required
          - `description` string
          - `org` string
          - `suborg` string
          - `workLocation` string
          - `nationality` string
          - `assets` ListEntityVictimAsset
            - `data` VictimAsset[]
              - …
            - `count` integer
            - `countSuccess` integer
            - `countFailure` integer
            - `count_type` string
            - `next` string
            - `prev` string
            - `mode` string
          - `attributes` ListEntityVictimAttributeData
            - `data` VictimAttributeData[]
              - …
            - `count` integer
            - `countSuccess` integer
            - `countFailure` integer
            - `count_type` string
            - `next` string
            - `prev` string
            - `mode` string
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
      - `attributes` ListEntityAttributeData
        - `data` AttributeData[]
          - `id` integer
          - `dateAdded` string, date-time
          - `securityLabels` ListEntitySecurityLabel — recursive
          - `type` string
          - `value` string, required
          - `source` string
          - `createdBy` User
            - `id` integer
            - `userName` string
            - `firstName` string
            - `lastName` string
            - `pseudonym` string
            - `owner` string
            - `password` string
            - `lastLogin` string, date-time
            - `lastPasswordChange` string, date-time
            - `uiTheme` string
            - `jobFunction` string
            - `jobRole` string
            - `termsAccepted` boolean
            - `termsAcceptedDate` string, date-time
            - `logoutIntervalMinutes` integer
            - `tqlTimeout` integer
            - `systemRole` string
            - `ownerRoles` object
            - `disabled` boolean
            - `locked` boolean
            - `passwordResetRequired` boolean
            - `twoFactorResetRequired` boolean
            - `customTqlTimeout` integer
          - `lastModified` string, date-time
          - `settings` AttributeSettings
            - `id` integer
            - `owner` string
            - `associable` boolean
            - `pinnedByDefault` boolean
            - `message` string
            - `default` boolean
          - `shardId` integer
          - `ownerId` integer
          - `pinned` boolean
          - `default` boolean
        - `count` integer
        - `countSuccess` integer
        - `countFailure` integer
        - `count_type` string
        - `next` string
        - `prev` string
        - `mode` string
    - `count` integer
    - `countSuccess` integer
    - `countFailure` integer
    - `count_type` string
    - `next` string
    - `prev` string
    - `mode` string
  - `type` string
  - `value` string, required
  - `source` string
  - `createdBy` User
    - `id` integer
    - `userName` string
    - `firstName` string
    - `lastName` string
    - `pseudonym` string
    - `owner` string
    - `password` string
    - `lastLogin` string, date-time
    - `lastPasswordChange` string, date-time
    - `uiTheme` string
    - `jobFunction` string
    - `jobRole` string
    - `termsAccepted` boolean
    - `termsAcceptedDate` string, date-time
    - `logoutIntervalMinutes` integer
    - `tqlTimeout` integer
    - `systemRole` string
    - `ownerRoles` object
    - `disabled` boolean
    - `locked` boolean
    - `passwordResetRequired` boolean
    - `twoFactorResetRequired` boolean
    - `customTqlTimeout` integer
  - `lastModified` string, date-time
  - `settings` AttributeSettings
    - `id` integer
    - `owner` string
    - `associable` boolean
    - `pinnedByDefault` boolean
    - `message` string
    - `default` boolean
  - `shardId` integer
  - `ownerId` integer
  - `caseId` integer, required
  - `pinned` boolean
  - `default` boolean

---

[API](https://skmtc.net/threatconnect/apis/threatconnect-api.md) · [All operations](https://skmtc.net/threatconnect/apis/threatconnect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/threatconnect/threatconnect-api/revisions/730b8a350ae7/schema)