McAfee (Trellix) · Schema

Case

AntivirusCybersecurityEndpoint ProtectionSecurityThreat Intelligence

Properties

Name Type Description
id integer Case ID
summary string Case summary
status string Case status
severity integer Case severity (1-100)
assignee string Assigned analyst
notes array Case notes
openTime string When the case was opened
closeTime string When the case was closed
View JSON Schema on GitHub

JSON Schema

mcafee-case-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/Case",
  "title": "Case",
  "type": "object",
  "properties": {
    "id": {
      "type": "integer",
      "description": "Case ID"
    },
    "summary": {
      "type": "string",
      "description": "Case summary"
    },
    "status": {
      "type": "string",
      "enum": [
        "Open",
        "Closed",
        "Other"
      ],
      "description": "Case status"
    },
    "severity": {
      "type": "integer",
      "description": "Case severity (1-100)"
    },
    "assignee": {
      "type": "string",
      "description": "Assigned analyst"
    },
    "notes": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "timestamp": {
            "type": "string",
            "format": "date-time"
          },
          "author": {
            "type": "string"
          },
          "content": {
            "type": "string"
          }
        }
      },
      "description": "Case notes"
    },
    "openTime": {
      "type": "string",
      "format": "date-time",
      "description": "When the case was opened"
    },
    "closeTime": {
      "type": "string",
      "format": "date-time",
      "description": "When the case was closed"
    }
  }
}