Skip to content

asp-enrichment

asp-enrichment creates ASP Enrichment records. Use it to save structured analysis, intelligence, asset context, or investigation conclusions to a Case, Alert, or Artifact.

Invocation

text
/asp-enrichment

Creating an Enrichment is a write operation and requires an explicit user request.

Common Examples

text
/asp-enrichment save enrichment.json to case_000001
text
/asp-enrichment save the threat intelligence result as a ti enrichment
text
/asp-enrichment attach owner and business-system context to the current artifact

Related CLI command:

powershell
asp enrichment create case_000001 --name ti --data-file enrichment.json --output json