MSdefender in a Standalone Cortex with caseID as mandatory

[tiagucardoso]

Request Type

Hey Guys,
I'm using Cortex as a standalone where i send via api some requests to get analysis. I'm trying to use the MSDefender responder via API. The request is done and is on the Cortex Jobs, but it end's in error: "caseId is missing"

i already tried to pass in the body the caseID key with a dummy but its not working. I already tried to pass the value as string or integer:

Something like this:
{
"_type":"case_artifact",
"data":"127.0.0.1",
"dataType":"ip",
"ioc":false,
"status":"Ok",
"tlp":2,
"caseId":123
}

Any tips?

Thanks,
Tiago Cardoso