Edit a report

Analysts can modify an unpublished report in Security Incident Response and share it via email.

Before you begin

Role required: sn_si.analyst

Procedure

1. Navigate to Workspaces > Security Incident Response Workspace.
2. Open a security incident.
3. Select Reports.

   The Report page displays a list of all the reports created for the selected incident.

4. Open the report to update.
   The report opens in edit mode with the incident data as configured in the template.
5. Edit the report as required.
6. Select Preview to view a preview of the report.
7. Select Save Content to save the changes.
8. Optional: Select the edit report details icon to update the report name and description.
9. Select Publish to publish the report.
10. Select the share report in email icon .
    1. Enter the recipient’s emails in the To and Cc/Bcc fields.
    2. Update the email Subject and Email Body.
    3. Select Send to share the report over email.