Configure SI design time investigation

Use this section to configure security incident design time investigation page to add multiple entry points and its associated records within the Security Incident Response Workspace.

Role required: sn_si.admin.

The following details the steps involved in configuring the investigation page on the Security Incident Response Workspace.

• Creating View for associated info tables
• Adding an entry point list
• Mapping View of the Associate Info to the entry point list
• Configure each associated list from the view to handle run time data rendering

• Creating View for associated info tables
  The investigation screen leverages the related list views created on security incident to configure associated lists.
• Adding an entry point list
  Configure the new entry point list to add it to the investigation page.
• Mapping View of the Associate Info to the entry point list
  Map the associated info view to the newly added entry point list using the Map Associated Info View action.
• Configure each associated list from the view to handle run time data rendering
  Configure each associated list from the view to handle run time data rendering.

Related concepts

• Set up view of SIR Records
• SIR Workspace Related Records
• Configure Shift Handover
• Security Incident Response conference call integration
• Configure report templates in Security Incident Response
• On-Call scheduling in Security Incident Response
• Category management in Security Incident Response
• View and update Security Incident Response system properties
• Timeline in Security Incident Response Workspace
• Explore Investigation Canvas

Related tasks

• Define the new Risk Score Calculator Rules
• Create quick filters for Security Incidents and Response Tasks lists