Issue
- You want to create new incidents in Computers, Detections and Executables details
- You want to select a Detection of interest for further investigation and create an incident
Solution
Choose to create a new incident or add a detection to an existing incident.
- Create incident—Redirect the user to the wizard window
- Add to current incident—Add elements to the current incident
- Add to recent incident—Add elements to one of the last three incidents
- Select incident to add to—Add elements to the selected incident
-
Click Create incident to open an incident template and specify custom settings.
-
Type an incident Name and Description.
-
Choose a Severity.
-
Specify an Assignee to investigate the incident.
-
Assign Tags to an incident from the existing list or create new custom tags.
-
Click Create to finish. The incident is created and will appear in the Incident view.