Content pack for Security Incident Response
Using the Process Mining content pack for Security Incident Response, you can analyze inefficiencies through the life cycle of your security incidents. You can use this information to optimize the processes for your security incidents.
For more information about enabling the Process Mining Content Pack for SIR, see Activate content packs.
End user and roles
If you have the required roles, you can use the Analyst workbench to access the visualized security incident workflow data, and tools for analyzing the data related to security incidents. For more information, see Analyst workbench page.
- Process Mining role: sn_process_mining_analyst
- Security Incident Response role: sn_si_read