Configuring SIR Workspace Release version: Yokohama Updated January 30, 2025 1 minute to readThis section describes the configurations needed to work with the Security Incident Response Workspace. Set up view of SIR RecordsThis section describes how the related lists are grouped and presented on the SIR Related Records tab for easy navigation.Configure SI design time investigationUse this section to configure security incident design time investigation page to add multiple entry points and its associated records within the Security Incident Response Workspace.SIR Workspace Related RecordsThis section consists of the related lists items that are grouped into sections such as associated observables and configuration items.Define the new Risk Score Calculator RulesUse the new Risk Score Calculator to define and calculate the risk score of security incidents based on the user-defined criteria, which provide a transparent intelligence scoring of security incidents. The risk score is auto-calculated for the security incident records.Configure Shift HandoverConfigure Shift Handover settings to provide complete shift information to the next shift analysts.Security Incident Response conference call integrationThe Security Incident Response Conference Call integration enables you to manage and initiate conference call and chat for analysts, managers and affected users.Configure report templates in Security Incident ResponseYou can create report templates that can be used to generate an incident summary or an executive summary for analysis and sharing.On-Call scheduling in Security Incident ResponseUse On-Call Scheduling in Security Incident Response to view and manage shifts for your analysts.Category management in Security Incident ResponseConfigure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents.View and update Security Incident Response system propertiesView and update the Security Incident Response Workspace system properties from the Security Incident Response Workspace administration panel to access and update the required properties.Create quick filters for Security Incidents and Response Tasks listsCreate quick filters to create reusable, predefined filters that appear on the security incidents and response tasks list pages enabling security analysts to filter the list items without adding the filter conditions each time.Timeline in Security Incident Response WorkspaceThe timeline provides a chronological view of events related to a security incident. Events appear as point events or range events. Administrators can configure which events appear on the timeline and what details are shown in event popovers.
Configuring SIR Workspace Release version: Yokohama Updated January 30, 2025 1 minute to readThis section describes the configurations needed to work with the Security Incident Response Workspace. Set up view of SIR RecordsThis section describes how the related lists are grouped and presented on the SIR Related Records tab for easy navigation.Configure SI design time investigationUse this section to configure security incident design time investigation page to add multiple entry points and its associated records within the Security Incident Response Workspace.SIR Workspace Related RecordsThis section consists of the related lists items that are grouped into sections such as associated observables and configuration items.Define the new Risk Score Calculator RulesUse the new Risk Score Calculator to define and calculate the risk score of security incidents based on the user-defined criteria, which provide a transparent intelligence scoring of security incidents. The risk score is auto-calculated for the security incident records.Configure Shift HandoverConfigure Shift Handover settings to provide complete shift information to the next shift analysts.Security Incident Response conference call integrationThe Security Incident Response Conference Call integration enables you to manage and initiate conference call and chat for analysts, managers and affected users.Configure report templates in Security Incident ResponseYou can create report templates that can be used to generate an incident summary or an executive summary for analysis and sharing.On-Call scheduling in Security Incident ResponseUse On-Call Scheduling in Security Incident Response to view and manage shifts for your analysts.Category management in Security Incident ResponseConfigure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents.View and update Security Incident Response system propertiesView and update the Security Incident Response Workspace system properties from the Security Incident Response Workspace administration panel to access and update the required properties.Create quick filters for Security Incidents and Response Tasks listsCreate quick filters to create reusable, predefined filters that appear on the security incidents and response tasks list pages enabling security analysts to filter the list items without adding the filter conditions each time.Timeline in Security Incident Response WorkspaceThe timeline provides a chronological view of events related to a security incident. Events appear as point events or range events. Administrators can configure which events appear on the timeline and what details are shown in event popovers.