Creating case task using Threat Analyst Workbench
Create case tasks to associate with case(s).
Before you begin
Role required: sn_sec_tisc.analyst, sn_sec_tisc.admin
Procedure
- Navigate to Workspaces > Threat Intelligence Security Center.
- Click Threat Analyst Workbench icon.
-
Go to Case Task Management > All Cases Tasks.
All the case tasks are displayed.
- Click New.
-
Fill in the fields as appropriate.
Table 1. Create New Case Task Field Description Task ID A unique identifier for the case task. This is system generated ID. Short Description Summary of the request or issue that is being investigated or a short description. Description A detailed description including any relevant information about the case task such as background, what analysis is required, outcomes expected. Parent Case ID Select the parent case ID from the lookup. Priority An assessment of the severity of the request or issue. Assignment group The assigned group responsible for working on the case task. Status The current status of the case task. Assigned to The Analyst who is responsible for working on a case task. Due Date The date and time that the case task is due to be completed or closed. TLP Unique value that indicates the Data sensitivity setting per TLP. Enforce Restriction As an sn_sec_tisc_admin, select this check box to modify members of allowed group and allowed members. For more information, see Enforced Restrictions for case(s). -
Fill in the fields on the Insights section, as appropriate.
Table 2. Insights Field Description Notes Any additional notes related to the threat investigation. Closure Add the closure summary of the findings. -
Click Save.
Your case task will be associated with your case.Note:After saving the case task, you can add tags and taxonomies to the task. For more information, see Creating Taxonomies.