View related info from TISC

Use this section to view the related info such as related threat actors, attack patterns, campaigns, and cases from TISC in SIR workspace.

Before you begin

Role required: sn_si.analyst

Procedure

1. Navigate to Workspaces > Security Incident Response Workspace > Security Incidents > All.
2. Locate and open any specific security incident that you are investigating.
   This can also be done by searching for the incident ID or browsing from Quick Filters section or filtering through incident state.
3. Once the incident is open, navigate to TISC Context tab.
   Viewing View Related Information:

   Within the incident details, you can view related information in several sections.

   1. Select one or more observables.
   2. Click on View Related Info button.
      This section displays the associated information that are related to the selected observables.

      Name	Description
      Threat Actors	Shows information from TISC for Threat Actors related to the selected observables.
      Attack Patterns	Shows information from TISC for Attack Patterns related to the selected observables.
      Campaigns	Shows information from TISC for Campaigns related to the selected observables.
      Cases	Shows information from TISC for TISC cases related to the selected observables.