Post incident analysis

Generate a post-incident analysis that includes a root cause analysis, impact assessment, and lessons learned within the workflow of closing a security incident.

Security managers and analysts can generate post-incident analysis data from within the security incident workflow from the following locations:

• The Security Incident Response Workspace.
• Security incident records in UI16.

Figure 1. Post-incident analysis in the Close the security incident modal

For more information, see Generate a post-incident analysis for a security incident with Now Assist for Security Incident Response.

Availability

This skill is available in the workflow and product listed below.

Table 1. Now Assist products and workflows

Workflow	Product
Technology	Now Assist for Security Incident Response