Security Incident Details section

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • This section displays the security incident form fields that are rendered from the security incident classic UI.

    The Classic UI has a view called SIRW View created. This view is mapped to the Details tab in the new workspace. Any customizations that are required need to be implemented in this view.

    The form fields are grouped into the following sections and displayed on the Details tab form view, click on any of the section or jump to the respective section within the form:

    • Security Incident
    • Priority
    • Source
    • Parent
    • Assignment
    • Access Controls
    • Affected Items
    • Resolution

    The Details tab contains the Activity stream section within the details form itself for a quick access to the security analysts to add any comments and post it.

    Figure 1. Details tab and Activity stream
    User Reported Phishing view: Details tab.

    View the SIR Analyst Workspace view:

    1. Navigate to All > Security Incident > Show Open incidents.
    2. Select any security incident record.
    3. Click on the context menu and select View > sirw.
      Note:
      You can customize using sirw workspace view in the classic UI form.
      Classic UI security incident
    4. The security incident workspace view is rendered as shown below.
      Figure 2. SIR workspace view
      Security incident in SIR workspace view
    5. On the Security Incident record, right click and go to Configure > Form Layout.
      Figure 3. Form layout
      Form layout
    6. Drill down to the Form view and section and select New from Section to create a new section.
      Figure 4. Form layout - section view
      Creating a new section
    7. Provide the new section name and click OK.

      For example, Incident form.

    8. The new section is created and added to the Section.
      Incident form section and Selected fields highlighted
    9. Select your new section and add the required section fields to the slush bucket and click Save.
      Figure 5. Section fields
      Adding fields to the new section
    10. The newly added section is displayed along with the existing section layout within the security incident form.
      Incident form tab highlighted
    11. Now, click Switch to SIR workspace to jump to the security incident form and the customized section within the Details tab of the workspace.