Create a Case Report using a template

Generate a case report from a published report template, such as a post-investigation report or an executive summary, and then preview, publish, and share it.

Before you begin

Role required: sn_sec_tisc.analyst

Procedure

1. Navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library.
2. Select Reports > Case Reports.
   Alternatively, select Reports > All Reports or Reports > My Reports.
3. Select New Case Report.
4. In the Create New Case Report window, enter the following details:
   1. In Case Number, select the case number to generate the report.
   2. In Generation Method, select Using Template.
5. Select Next.
6. Select the required report template to generate the report.

   The report opens in the editor, populated from the selected template.

7. Optional: Use the report editor to build the report content.
   • Select the Edit report details icon to edit the report name and description.
   • Select the Expand icon to insert additional content — for example, Observables or Indicators — into the report.
   • Type / to use a slash command and insert dynamic content, such as a record count, a specific record or field, or a system user. For the available slash commands and supported tables, see Working with Reports in TISC.
   • Select Save Content to save your changes and enable Publish.
   • Select Preview to generate a PDF preview of the current content.
8. When your edits are complete, select Publish.

   After publishing, download the report as a PDF or share it with stakeholders by email.