Reports in Security Incident Response

All the reports associated with a security incident are available within the Reports section for analysis and sharing.

The analyst will be able to:

• Create a report
• Edit a report
• Delete a report

• Create a report
  Analysts can create a report in Security Incident Response to include the status of an incident and share it via email.
• Edit a report
  Analysts can modify an unpublished report in Security Incident Response and share it via email.
• Delete a report
  You can delete a report in Security Incident Response which is in published or draft state.

Related concepts

• Security Incident Overview section
• Security Incident Details section
• SIR Workspace Orchestration
• Security Incident Response Tasks
• Security Incident Response Other Records
• Security Incident Response Post Incident Review
• TISC integration within SIR Workspace
• Collaborate using conference call or chat in Security Incident Response
• Viewing incident details with a relationship graph
• MITRE attack and defend technique graph

Related tasks

• Edit Related Records in list view