Security incident recommended actions

  • Release version: Xanadu
  • Updated October 16, 2024
  • 1 minute to read

    • View generated remediation steps that might solve security incidents without having to check multiple sources for information.

    In Security Incident Response Workspace, you can use the Now Assist icon in the sidebar to generate recommended actions from existing security incidents and knowledge articles. Your analysts can create a response task from the recommended actions.

    Generated recommended actions are displayed in cards. Up to four references for the actions are displayed at the top. These references can be any combination of knowledge articles (KB)s or security incidents (SIR#).

    Figure 1. Recommended actions for an incident in Security Incident Response Workspace
    Recommended actions for the selected security incident appear as tiles in the sidebar of Security Incident Response Workspace.

    For more information, see Generate recommended actions for a security incident with Now Assist for Security Incident Response.

    Availability

    This skill is available in the workflow and product listed below.

    Table 1. Now Assist products and workflows
    Workflow Product
    Technology

    Now Assist for Security Incident Response