| Name | Type | Description | Notes |
|---|---|---|---|
| shard_id | int | [optional] | |
| description | str | The description for the resolve | [optional] |
| entry_id | str | The entry ID | [optional] |
| fetched | datetime | when the evidence entry was fetched | [optional] |
| has_role | bool | Internal field to make queries on role faster | [optional] |
| id | str | [optional] | |
| incident_id | str | The incident ID | [optional] |
| marked_by | str | the user that marked this evidence | [optional] |
| marked_date | datetime | when this evidence was marked | [optional] |
| modified | datetime | [optional] | |
| occurred | datetime | When this evidence has occurred | [optional] |
| previous_roles | list[str] | PreviousRoleName - do not change this field manually | [optional] |
| roles | list[str] | The role assigned to this investigation | [optional] |
| sort_values | list[str] | [optional] | |
| tags | list[str] | Tags | [optional] |
| tags_raw | list[str] | TagsRaw | [optional] |
| task_id | str | when the evidence entry was fetched | [optional] |
| version | int | [optional] |