TISC integration within SIR Workspace

TISC integration with SIR automatically shares the context on the observables within the security Incident workspace and observables.

Any new observables from SIR can be sent to TISC for further analysis by CTI team using the UI actions provides on the screens. Additionally, any enrichment results that are produced from integrations only available in SIR can also be pushed using the UI actions provided in the workspace.

• Send data from SIR Workspace to TISC
  Learn how the data is collaborated and shared between the Threat Intelligence Security Center (TISC) and Security Incident Response (SIR) Workspaces by following the procedures explained in the following sections.
• Working with TISC Context
  TISC context facilitates viewing threat intelligence data such as observables within the security incident response workspace.

Related concepts

• Security Incident Overview section
• Security Incident Details section
• SIR Workspace Orchestration
• Security Incident Response Tasks
• Security Incident Response Other Records
• Security Incident Response Post Incident Review
• Reports in Security Incident Response
• Collaborate using conference call or chat in Security Incident Response
• Viewing incident details with a relationship graph