Improved
Enhanced Threat Center Endpoint
July 15th, 2026
You can now use a new field for tracking when a case has been closed. The updates add a caseClosedTimestamp property (type: string, format: date-time) to the response schema with an appropriate description and example, allowing clients to know when a case was closed.
- Threat Center > Cases > Get case details
This now allows the ability to compute Time to Close (TTC) per case and Mean Time to Close (MTTC) across closed cases.