Workbench Overview

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • The Workbench Overview page consists of the Case Tasks and Cases that are under Threat Analysts and their team.

    The overview lists all the open cases and their status which helps the analysts to manage their workload and prioritize their investigations.

    Role required: sn_sec_tisc.analyst, sn_sec_tisc.admin

    After the case is created, the analysts will then assign the case tasks to other analysts or teams for further investigation, and also collaborate with them to share information and insights.

    There are various widgets present under each filter grouped by priority, status, and case type which are in the threat analysts’ queues and threat analysts team's queue.

    Workbench Overview

    When filters are applied on the widgets, the bottom half of the overview page is populated with the corresponding cases or case tasks presented as list items. In order to remove the applied filters, click on Reset Filters to reset it to the original view.

    Using this page, the threat analysts and admins can view their work, teams work, and any unassigned work. You can navigate to dropdown list. The available options are:
    • My Work: Select this option to view the work assigned to you.
    • My team's work: Select this option to view your team's work assigned to all the groups that you are part of.
    • Unassigned work: Select this option to view the case or case task that are unassigned. To assign the case or case task, you must go to the form view and assign the user(s) or user group(s) to the case and case task(s).

    You can also view cases and case tasks directly from the Workbench Overview that are assigned to you. By default, the case view is displayed, you can use the dropdown and select the case tasks if you want to view the case tasks by priority and status.