InvestigationAction ¶

class InvestigationAction(TypedDict, closed=True):
    investigation_id: "capo_security_ir.types.investigation_id.InvestigationId"
    """<p>The unique identifier for this investigation action. This ID is used to track and reference the specific investigation throughout its lifecycle.</p>"""
    action_type: "capo_security_ir.types.action_type.ActionType"
    """<p>The type of investigation action being performed. This categorizes the investigation method or approach used in the case.</p>"""
    title: "capo_security_ir.types.investigation_title.InvestigationTitle"
    """<p>Human-readable summary of the investigation focus. This provides a brief description of what the investigation is examining or analyzing.</p>"""
    content: "capo_security_ir.types.investigation_content.InvestigationContent"
    """<p>Detailed investigation results in rich markdown format. This field contains the comprehensive findings, analysis, and conclusions from the investigation.</p>"""
    status: "capo_security_ir.types.execution_status.ExecutionStatus"
    """<p>The current execution status of the investigation. This indicates whether the investigation is pending, in progress, completed, or failed.</p>"""
    last_updated: "datetime.datetime"
    """<p>ISO 8601 timestamp of the most recent status update. This indicates when the investigation was last modified or when its status last changed.</p>"""
    feedback: NotRequired[
        "capo_security_ir.types.investigation_feedback.InvestigationFeedback"
    ]
    """<p>User feedback for this investigation result. This contains the user's assessment and comments about the quality and usefulness of the investigation findings.</p>"""