From 106d1a0b6843381333fbad29bf2f486df2da9a72 Mon Sep 17 00:00:00 2001
From: Ishan Shah <ishans@splunk.com>
Date: Thu, 3 Oct 2024 15:51:05 +0530
Subject: [PATCH] Set read only true for action 'vault sandbox analysis'

---
 trendmicrovisionone.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/trendmicrovisionone.json b/trendmicrovisionone.json
index f1d9691..fbc0b31 100644
--- a/trendmicrovisionone.json
+++ b/trendmicrovisionone.json
@@ -2907,7 +2907,7 @@
             "description": "Send vault item to sandbox for analysis",
             "verbose": "Sends vault item to sandbox for analysis. Provide file name and vault id to perform the action.",
             "type": "investigate",
-            "read_only": false,
+            "read_only": true,
             "parameters": {
                 "vault_id": {
                     "description": "ID of item in vault",