Generate a Case Report using a template

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Use a predefined report template to generate case reports. These reports include post investigation report or an executive summary report.

    Before you begin

    Role required: sn_sec_tisc.analyst

    About this task

    Generate case reports using predefined templates.

    For information about generating a report using AI, see Generate a Case Report using generative AI.

    Procedure

    1. Navigate to Workspaces > Threat Intelligence Security Center.
    2. Select Threat Analyst Workbench.
    3. In Case Management, open the case to generate the report.
    4. Select the Case Reports tab.
      Note:
      You can delete the reports from the list, create a duplicate copy of the existing reports and customize your own report.
    5. Select New with Template as the report generation method.
      For information about generating a report using AI, see Generate a Case Report using generative AI.
    6. Select a report template from the list.
      The selected report template for the report type is generated. In the draft stage, the report viewing is restricted. As an analyst you can view the published reports but not the draft.
    7. Optional: Use the report editor to build the report content.
      • Select the Edit report details iconEdit report details icon to edit the report name and description.
      • Select the Expand iconExpand icon to insert additional content — for example, Observables or Indicators — into the report.
      • Type / to use a slash command and insert dynamic content, such as a record count, a specific record or field, or a system user. For the available slash commands and supported tables, see Working with Reports in TISC.
      • Select Save Content to save your changes and enable Publish.
      • Select Preview to generate a PDF preview of the current content.
    8. When your edits are complete, select Publish.

      After publishing, download the report as a PDF or share it with stakeholders by email.