Issue
- You want to create new incidents in Computers, Detections and Executables details
- You want to select a Detection of interest for further investigation and create an incident
Solution
Choose to create a new incident or add a detection to an existing incident.
- Create incident—Redirect the user to the wizard window
- Add to current incident—Add elements to the current incident
- Add to recent incident—Add elements to one of the last three incidents
- Select incident to add to—Add elements to the selected incident
Click Create incident to open an incident template and specify custom settings.
Type an incident Name and Description.
Choose a Severity.
Specify an Assignee to investigate the incident.
Assign Tags to an incident from the existing list or create new custom tags.
Click Create to finish. The incident is created and will appear in the Incident view.