Create a link between the incident and the default playbook - Cisco XDR APIs

{"type":"api","title":"Create a link between the incident and the default playbook","meta":{"id":"/apps/pubhub/media/cisco-xdr-api-docs/f4e065ff5977829c89df289df08411f83205f526/c98907ec-ab5b-300c-875e-ed82e1fb4b50","info":{"title":"Playbook","description":"Playbook customization and status retrieval","contact":{"name":"Cisco Security Business Group -- Advanced Threat","email":"cisco-intel-api-support@cisco.com"},"license":{"name":"All Rights Reserved","url":"https://www.cisco.com"},"version":"30-1-9e5e32c8"},"security":[{"oAuth2":["integration:read","private-intel:read","profile:read","inspect:read","users:read","invite:read","enrich:read","oauth:read","response:read","global-intel:read","ao:read","playbook:read"]}],"x-parser-conf":{"serverConfig":"select","overview":{"markdownPath":"reference/playbook/overview.md","uri":"playbook-api-guide"},"disableAuthEditing":true,"exampleAsDefault":true,"oAuth2":{"clientId":"client-546e34fc-c6bf-4951-ac69-f6d7987a7814","clientSecret":"MYw4_E_tBdFwUwrX6WFYKVD5LQrG2k7XrJ5J046wWE0s1gAKCxJ8VA","proxyEnabled":false},"meta":{"useProxy":true}},"openapi":"3.0.1","servers":[{"url":"https://playbook.us.security.cisco.com"}],"securitySchemes":{"oAuth2":{"type":"oauth2","flows":{"clientCredentials":{"tokenUrl":"https://visibility.amp.cisco.com/iroh/oauth2/token","scopes":{"telemetry":"Collect application data for analytics","integration:read":"Manage your modules","private-intel:read":"Access Private Intelligence","admin":"Provide admin privileges","cognitive":"Cognitive Integration","profile:read":"Get your profile information","inspect:read":"Extract Observables and data from text","asset":"Access and modify your assets","event":"Read IROH Events","feedback":"Submit Customer Feedback","sse":"SSE Integration. Manage your Devices.","registry":"Manage registry entries","users:read":"Manage users of your organization","investigation":"Perform threat analysis investigation","invite:read":"Invite users into your organization","casebook":"Access and modify your casebooks","playbook":"Access and modify your playbooks","orbital":"Orbital Integration.","enrich:read":"Query your configured modules for threat intelligence","oauth:read":"Manage OAuth2 Clients","vault":"Grants access to Module Vaults","response:read":"List and execute response actions using configured modules","notification":"Receive notifications from integrations","global-intel:read":"Access AMP Global Intelligence","webhook":"Manage your Webhooks","ao:read":"AO Integration."}}}}}},"spec":{"tags":["Incident"],"summary":"Create a link between the incident and the default playbook.","parameters":[{"name":"incident-id","in":"path","description":"The short-id for an incident that was previously created in CTIA","required":true,"schema":{"type":"string"}}],"responses":{"201":{"description":"","content":{"application/json":{"schema":{"required":["default","id","is_global","owner","phases","short_description","template_id","timestamp","title"],"type":"object","properties":{"title":{"type":"string","example":"Title for Playbook"},"description":{"type":"string","description":"A longer description of the Playbook that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string"},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"id":{"type":"string","format":"uuid"},"default":{"type":"boolean"},"is_global":{"type":"boolean"},"owner":{"type":"string","example":"Link Mario"},"timestamp":{"type":"string","format":"date-time"},"template_id":{"type":"string","format":"uuid","nullable":true},"phases":{"type":"array","items":{"required":["description","id","owner","short_description","stage","status","tasks","title"],"type":"object","properties":{"title":{"type":"string","nullable":true,"example":"Title for Phase"},"description":{"type":"string","description":"A longer description of the phase that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string","nullable":true},"stage":{"type":"string","enum":["Identification","Containment","Eradication","Recovery"],"x-anyOf":[{"type":"string","enum":["Identification","Containment","Eradication","Recovery"]},{"type":"string"}]},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"owner":{"type":"string","example":"Link Mario"},"id":{"type":"string","example":"aef01780-51ad-441e-aa99-1fc7dc35ad28"},"status":{"type":"string","enum":["completed","in progress","failed","running","not-applicable","action-required","errored"]},"tasks":{"type":"array","items":{"required":["can_execute","description","id","owner","short_description","status","title","workflow_external_id"],"type":"object","properties":{"title":{"type":"string","example":"Title for the Task"},"description":{"type":"string","description":"A longer description of the task that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string"},"actuator_type":{"type":"string","nullable":true,"enum":["endpoint","endpoint.digital-telephone-handset","endpoint.laptop","endpoint.pos-terminal","endpoint.printer","endpoint.sensor","endpoint.server","endpoint.smart-meter","endpoint.smart-phone","endpoint.tablet","endpoint.workstation","network","network.bridge","network.firewall","network.gateway","network.guard","network.hips","network.hub","network.ids","network.ips","network.modem","network.nic","network.proxy","network.router","network.security_manager","network.sense_making","network.sensor","network.switch","network.vpn","network.wap","other","process","process.aaa-server","process.anti-virus-scanner","process.connection-scanner","process.directory-service","process.dns-server","process.email-service","process.file-scanner","process.location-service","process.network-scanner","process.remediation-service","process.reputation-service","process.sandbox","process.virtualization-service","process.vulnerability-scanner"]},"action_type":{"type":"string","nullable":true,"enum":["alert","allow","augment","contain","delete","deny","detonate","distill","get","investigate","locate","mitigate","modify","move","notify","other","pause","query","redirect","remediate","report","response","restart","restore","resume","save","scan","set","snapshot","start","stop","substitute","sync","throttle","update"]},"cost":{"type":"string","nullable":true,"enum":["high","info","low","medium","none","unknown"]},"efficacy":{"type":"string","nullable":true,"enum":["high","info","low","medium","none","unknown"]},"impact":{"type":"string","nullable":true,"example":"Determine if the detection is a false positive or confirmed event based on existing data."},"objective":{"type":"string","nullable":true,"example":"To remove bias and support investigation based on indicators that validate compromise or violation for continued investigation."},"tlp":{"type":"string","enum":["green","amber","red","white"]},"target_types":{"type":"array","nullable":true,"items":{"type":"string","enum":["amp_computer_guid","certificate_common_name","certificate_issuer","certificate_serial","cisco_cm_id","cisco_mid","cisco_uc_id","cortex_agent_id","crowdstrike_id","cybereason_id","darktrace_id","device","domain","email","email_messageid","email_subject","file_name","file_path","hostname","imei","imsi","ip","ipv6","mac_address","md5","ms_machine_id","mutex","ngfw_id","ngfw_name","none","odns_identity","odns_identity_label","orbital_node_id","pki_serial","process_args","process_hash","process_name","process_path","process_username","processor_id","registry_key","registry_name","registry_path","s1_agent_id","serial_number","sha1","sha256","swc_device_id","trend_micro_id","url","user","user_agent"]}},"workflow_external_id":{"type":"string","nullable":true},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"id":{"type":"string","example":"aef01780-51ad-441e-aa99-1fc7dc35ad28"},"owner":{"type":"string","example":"Link Mario"},"status":{"type":"string","enum":["completed","in progress","failed","running","not-applicable","action-required","errored"]},"can_execute":{"type":"boolean"}}}}}}}}}},"application/transit+msgpack":{"schema":{"required":["default","id","is_global","owner","phases","short_description","template_id","timestamp","title"],"type":"object","properties":{"title":{"type":"string","example":"Title for Playbook"},"description":{"type":"string","description":"A longer description of the Playbook that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string"},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"id":{"type":"string","format":"uuid"},"default":{"type":"boolean"},"is_global":{"type":"boolean"},"owner":{"type":"string","example":"Link Mario"},"timestamp":{"type":"string","format":"date-time"},"template_id":{"type":"string","format":"uuid","nullable":true},"phases":{"type":"array","items":{"required":["description","id","owner","short_description","stage","status","tasks","title"],"type":"object","properties":{"title":{"type":"string","nullable":true,"example":"Title for Phase"},"description":{"type":"string","description":"A longer description of the phase that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string","nullable":true},"stage":{"type":"string","enum":["Identification","Containment","Eradication","Recovery"],"x-anyOf":[{"type":"string","enum":["Identification","Containment","Eradication","Recovery"]},{"type":"string"}]},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"owner":{"type":"string","example":"Link Mario"},"id":{"type":"string","example":"aef01780-51ad-441e-aa99-1fc7dc35ad28"},"status":{"type":"string","enum":["completed","in progress","failed","running","not-applicable","action-required","errored"]},"tasks":{"type":"array","items":{"required":["can_execute","description","id","owner","short_description","status","title","workflow_external_id"],"type":"object","properties":{"title":{"type":"string","example":"Title for the Task"},"description":{"type":"string","description":"A longer description of the task that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string"},"actuator_type":{"type":"string","nullable":true,"enum":["endpoint","endpoint.digital-telephone-handset","endpoint.laptop","endpoint.pos-terminal","endpoint.printer","endpoint.sensor","endpoint.server","endpoint.smart-meter","endpoint.smart-phone","endpoint.tablet","endpoint.workstation","network","network.bridge","network.firewall","network.gateway","network.guard","network.hips","network.hub","network.ids","network.ips","network.modem","network.nic","network.proxy","network.router","network.security_manager","network.sense_making","network.sensor","network.switch","network.vpn","network.wap","other","process","process.aaa-server","process.anti-virus-scanner","process.connection-scanner","process.directory-service","process.dns-server","process.email-service","process.file-scanner","process.location-service","process.network-scanner","process.remediation-service","process.reputation-service","process.sandbox","process.virtualization-service","process.vulnerability-scanner"]},"action_type":{"type":"string","nullable":true,"enum":["alert","allow","augment","contain","delete","deny","detonate","distill","get","investigate","locate","mitigate","modify","move","notify","other","pause","query","redirect","remediate","report","response","restart","restore","resume","save","scan","set","snapshot","start","stop","substitute","sync","throttle","update"]},"cost":{"type":"string","nullable":true,"enum":["high","info","low","medium","none","unknown"]},"efficacy":{"type":"string","nullable":true,"enum":["high","info","low","medium","none","unknown"]},"impact":{"type":"string","nullable":true,"example":"Determine if the detection is a false positive or confirmed event based on existing data."},"objective":{"type":"string","nullable":true,"example":"To remove bias and support investigation based on indicators that validate compromise or violation for continued investigation."},"tlp":{"type":"string","enum":["green","amber","red","white"]},"target_types":{"type":"array","nullable":true,"items":{"type":"string","enum":["amp_computer_guid","certificate_common_name","certificate_issuer","certificate_serial","cisco_cm_id","cisco_mid","cisco_uc_id","cortex_agent_id","crowdstrike_id","cybereason_id","darktrace_id","device","domain","email","email_messageid","email_subject","file_name","file_path","hostname","imei","imsi","ip","ipv6","mac_address","md5","ms_machine_id","mutex","ngfw_id","ngfw_name","none","odns_identity","odns_identity_label","orbital_node_id","pki_serial","process_args","process_hash","process_name","process_path","process_username","processor_id","registry_key","registry_name","registry_path","s1_agent_id","serial_number","sha1","sha256","swc_device_id","trend_micro_id","url","user","user_agent"]}},"workflow_external_id":{"type":"string","nullable":true},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"id":{"type":"string","example":"aef01780-51ad-441e-aa99-1fc7dc35ad28"},"owner":{"type":"string","example":"Link Mario"},"status":{"type":"string","enum":["completed","in progress","failed","running","not-applicable","action-required","errored"]},"can_execute":{"type":"boolean"}}}}}}}}}},"application/transit+json":{"schema":{"required":["default","id","is_global","owner","phases","short_description","template_id","timestamp","title"],"type":"object","properties":{"title":{"type":"string","example":"Title for Playbook"},"description":{"type":"string","description":"A longer description of the Playbook that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string"},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"id":{"type":"string","format":"uuid"},"default":{"type":"boolean"},"is_global":{"type":"boolean"},"owner":{"type":"string","example":"Link Mario"},"timestamp":{"type":"string","format":"date-time"},"template_id":{"type":"string","format":"uuid","nullable":true},"phases":{"type":"array","items":{"required":["description","id","owner","short_description","stage","status","tasks","title"],"type":"object","properties":{"title":{"type":"string","nullable":true,"example":"Title for Phase"},"description":{"type":"string","description":"A longer description of the phase that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string","nullable":true},"stage":{"type":"string","enum":["Identification","Containment","Eradication","Recovery"],"x-anyOf":[{"type":"string","enum":["Identification","Containment","Eradication","Recovery"]},{"type":"string"}]},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"owner":{"type":"string","example":"Link Mario"},"id":{"type":"string","example":"aef01780-51ad-441e-aa99-1fc7dc35ad28"},"status":{"type":"string","enum":["completed","in progress","failed","running","not-applicable","action-required","errored"]},"tasks":{"type":"array","items":{"required":["can_execute","description","id","owner","short_description","status","title","workflow_external_id"],"type":"object","properties":{"title":{"type":"string","example":"Title for the Task"},"description":{"type":"string","description":"A longer description of the task that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string"},"actuator_type":{"type":"string","nullable":true,"enum":["endpoint","endpoint.digital-telephone-handset","endpoint.laptop","endpoint.pos-terminal","endpoint.printer","endpoint.sensor","endpoint.server","endpoint.smart-meter","endpoint.smart-phone","endpoint.tablet","endpoint.workstation","network","network.bridge","network.firewall","network.gateway","network.guard","network.hips","network.hub","network.ids","network.ips","network.modem","network.nic","network.proxy","network.router","network.security_manager","network.sense_making","network.sensor","network.switch","network.vpn","network.wap","other","process","process.aaa-server","process.anti-virus-scanner","process.connection-scanner","process.directory-service","process.dns-server","process.email-service","process.file-scanner","process.location-service","process.network-scanner","process.remediation-service","process.reputation-service","process.sandbox","process.virtualization-service","process.vulnerability-scanner"]},"action_type":{"type":"string","nullable":true,"enum":["alert","allow","augment","contain","delete","deny","detonate","distill","get","investigate","locate","mitigate","modify","move","notify","other","pause","query","redirect","remediate","report","response","restart","restore","resume","save","scan","set","snapshot","start","stop","substitute","sync","throttle","update"]},"cost":{"type":"string","nullable":true,"enum":["high","info","low","medium","none","unknown"]},"efficacy":{"type":"string","nullable":true,"enum":["high","info","low","medium","none","unknown"]},"impact":{"type":"string","nullable":true,"example":"Determine if the detection is a false positive or confirmed event based on existing data."},"objective":{"type":"string","nullable":true,"example":"To remove bias and support investigation based on indicators that validate compromise or violation for continued investigation."},"tlp":{"type":"string","enum":["green","amber","red","white"]},"target_types":{"type":"array","nullable":true,"items":{"type":"string","enum":["amp_computer_guid","certificate_common_name","certificate_issuer","certificate_serial","cisco_cm_id","cisco_mid","cisco_uc_id","cortex_agent_id","crowdstrike_id","cybereason_id","darktrace_id","device","domain","email","email_messageid","email_subject","file_name","file_path","hostname","imei","imsi","ip","ipv6","mac_address","md5","ms_machine_id","mutex","ngfw_id","ngfw_name","none","odns_identity","odns_identity_label","orbital_node_id","pki_serial","process_args","process_hash","process_name","process_path","process_username","processor_id","registry_key","registry_name","registry_path","s1_agent_id","serial_number","sha1","sha256","swc_device_id","trend_micro_id","url","user","user_agent"]}},"workflow_external_id":{"type":"string","nullable":true},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"id":{"type":"string","example":"aef01780-51ad-441e-aa99-1fc7dc35ad28"},"owner":{"type":"string","example":"Link Mario"},"status":{"type":"string","enum":["completed","in progress","failed","running","not-applicable","action-required","errored"]},"can_execute":{"type":"boolean"}}}}}}}}}},"application/edn":{"schema":{"required":["default","id","is_global","owner","phases","short_description","template_id","timestamp","title"],"type":"object","properties":{"title":{"type":"string","example":"Title for Playbook"},"description":{"type":"string","description":"A longer description of the Playbook that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string"},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"id":{"type":"string","format":"uuid"},"default":{"type":"boolean"},"is_global":{"type":"boolean"},"owner":{"type":"string","example":"Link Mario"},"timestamp":{"type":"string","format":"date-time"},"template_id":{"type":"string","format":"uuid","nullable":true},"phases":{"type":"array","items":{"required":["description","id","owner","short_description","stage","status","tasks","title"],"type":"object","properties":{"title":{"type":"string","nullable":true,"example":"Title for Phase"},"description":{"type":"string","description":"A longer description of the phase that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string","nullable":true},"stage":{"type":"string","enum":["Identification","Containment","Eradication","Recovery"],"x-anyOf":[{"type":"string","enum":["Identification","Containment","Eradication","Recovery"]},{"type":"string"}]},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"owner":{"type":"string","example":"Link Mario"},"id":{"type":"string","example":"aef01780-51ad-441e-aa99-1fc7dc35ad28"},"status":{"type":"string","enum":["completed","in progress","failed","running","not-applicable","action-required","errored"]},"tasks":{"type":"array","items":{"required":["can_execute","description","id","owner","short_description","status","title","workflow_external_id"],"type":"object","properties":{"title":{"type":"string","example":"Title for the Task"},"description":{"type":"string","description":"A longer description of the task that can be up to 5000 characters.","nullable":true,"example":"A Longer Description"},"short_description":{"type":"string"},"actuator_type":{"type":"string","nullable":true,"enum":["endpoint","endpoint.digital-telephone-handset","endpoint.laptop","endpoint.pos-terminal","endpoint.printer","endpoint.sensor","endpoint.server","endpoint.smart-meter","endpoint.smart-phone","endpoint.tablet","endpoint.workstation","network","network.bridge","network.firewall","network.gateway","network.guard","network.hips","network.hub","network.ids","network.ips","network.modem","network.nic","network.proxy","network.router","network.security_manager","network.sense_making","network.sensor","network.switch","network.vpn","network.wap","other","process","process.aaa-server","process.anti-virus-scanner","process.connection-scanner","process.directory-service","process.dns-server","process.email-service","process.file-scanner","process.location-service","process.network-scanner","process.remediation-service","process.reputation-service","process.sandbox","process.virtualization-service","process.vulnerability-scanner"]},"action_type":{"type":"string","nullable":true,"enum":["alert","allow","augment","contain","delete","deny","detonate","distill","get","investigate","locate","mitigate","modify","move","notify","other","pause","query","redirect","remediate","report","response","restart","restore","resume","save","scan","set","snapshot","start","stop","substitute","sync","throttle","update"]},"cost":{"type":"string","nullable":true,"enum":["high","info","low","medium","none","unknown"]},"efficacy":{"type":"string","nullable":true,"enum":["high","info","low","medium","none","unknown"]},"impact":{"type":"string","nullable":true,"example":"Determine if the detection is a false positive or confirmed event based on existing data."},"objective":{"type":"string","nullable":true,"example":"To remove bias and support investigation based on indicators that validate compromise or violation for continued investigation."},"tlp":{"type":"string","enum":["green","amber","red","white"]},"target_types":{"type":"array","nullable":true,"items":{"type":"string","enum":["amp_computer_guid","certificate_common_name","certificate_issuer","certificate_serial","cisco_cm_id","cisco_mid","cisco_uc_id","cortex_agent_id","crowdstrike_id","cybereason_id","darktrace_id","device","domain","email","email_messageid","email_subject","file_name","file_path","hostname","imei","imsi","ip","ipv6","mac_address","md5","ms_machine_id","mutex","ngfw_id","ngfw_name","none","odns_identity","odns_identity_label","orbital_node_id","pki_serial","process_args","process_hash","process_name","process_path","process_username","processor_id","registry_key","registry_name","registry_path","s1_agent_id","serial_number","sha1","sha256","swc_device_id","trend_micro_id","url","user","user_agent"]}},"workflow_external_id":{"type":"string","nullable":true},"language":{"type":"string","example":"English"},"source":{"type":"string","nullable":true,"example":"NIST 800-61r2 3.3.4 Eradication and Recovery"},"source_uri":{"type":"string","nullable":true,"example":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf"},"id":{"type":"string","example":"aef01780-51ad-441e-aa99-1fc7dc35ad28"},"owner":{"type":"string","example":"Link Mario"},"status":{"type":"string","enum":["completed","in progress","failed","running","not-applicable","action-required","errored"]},"can_execute":{"type":"boolean"}}}}}}}}}}}},"400":{"description":"","content":{"application/json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"object"}}}},"application/transit+msgpack":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"object"}}}},"application/transit+json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"object"}}}},"application/edn":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"object"}}}}}},"401":{"description":"","content":{"application/json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["Unauthorized"]}}}},"application/transit+msgpack":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["Unauthorized"]}}}},"application/transit+json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["Unauthorized"]}}}},"application/edn":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["Unauthorized"]}}}}}},"403":{"description":"","content":{"application/json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["Forbidden"]}}}},"application/transit+msgpack":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["Forbidden"]}}}},"application/transit+json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["Forbidden"]}}}},"application/edn":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["Forbidden"]}}}}}},"404":{"description":"","content":{}},"405":{"description":"","content":{}},"406":{"description":"","content":{}},"409":{"description":"","content":{"application/json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["error_playbook_already_assigned"]}}}},"application/transit+msgpack":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["error_playbook_already_assigned"]}}}},"application/transit+json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["error_playbook_already_assigned"]}}}},"application/edn":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"string","enum":["error_playbook_already_assigned"]}}}}}},"500":{"description":"","content":{"application/json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"object"},"exception":{"type":"string"},"data":{"type":"object"},"uri":{"type":"string"}}}},"application/transit+msgpack":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"object"},"exception":{"type":"string"},"data":{"type":"object"},"uri":{"type":"string"}}}},"application/transit+json":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"object"},"exception":{"type":"string"},"data":{"type":"object"},"uri":{"type":"string"}}}},"application/edn":{"schema":{"required":["message"],"type":"object","properties":{"message":{"type":"object"},"exception":{"type":"string"},"data":{"type":"object"},"uri":{"type":"string"}}}}}}},"security":[{"JWT-Bearer":[]},{"JWT-Bearer":[]}],"method":"put","path":"/v1/incident/{incident-id}/default"}}