Download Code42 Cases

This story automatically retrieves investigation cases from Code42, downloads the full case export for each one, and delivers it to both a Jira ticket and a specified email address — no manual steps required.

---

What you'll see

• List all cases from your Code42 tenant via API
• Explode the case array so each case is processed individually
• Deduplicate cases to ensure you're only acting on new ones and not re-processing cases you've already seen
• Download the full case export as a zip file containing the case summary, file events, and associated files
• Send an email with the case export attached to a specified recipient
• Create a Jira ticket pre-populated with the case name, subject username, creation date, and a direct link back to Code42
• Attach the case export to the newly created Jira ticket

---

Perfect for

• Insider threat teams: automatically packaging and routing Code42 investigation cases without manual exports
• Security operations teams: keeping Jira up to date with active DLP cases and their associated evidence files
• IR analysts: receiving case exports directly in their inbox as investigations are opened in Code42

---

Requirements

• Code42 — OAuth credential with your API Gateway domain set in the credential metadata
• Jira Software — API key credential with your Jira domain and username set in the credential metadata
• A designated email address to receive case export notifications
• A Jira project key to create tickets in (e.g. DEMO)
• Basic familiarity with Code42 Cases and Jira project configuration