Managing security incidents and inbound requests

After a security incident has been created, there are numerous types of information that can be added and viewed as your analysis of the issue progresses toward resolution.

Important:

The latest features in Security Incident Response are exclusively available in the Security Incident Response Workspace. Please install or upgrade to the latest Security Incident Response or Security Incident Response Workspace version to access and leverage features such as Shift-Handover, Risk Score Calculator, etc.

This section describes the following:

• Create an inbound request
• Manage observables
• Manage lookups and scans
• Calculate the severity of a security incident
• Manage post incident activities
• Close security incidents