Creating Security Cases (Workbench)

Create Security Incident and Health Incident Cases from the Workbench by completing the follwing steps:

  1. Click + Create Case.
    The Create Case window appears.
  2. Fill in the following fields:
    • Case Title: Specifies the Case title.
    • Case Type dropdown: Specified the Case type.
    • Incident Category dropdown: Select from the list of incident categories.
    • Case Priority: Specifies a priority level for the case.
    • Detection Severity: Select from Low, Medium, High and Critical.
    • Assigned To: Specifies an assignee for the Case.
    • Notable Cause checkbox: Select this if the case already has a known cause.
    • Threat Hunting checkbox: Select this if the case was discovered through threat hunting activities.
    • Description: Optionally provide a description for the case.
  3. Click Save.

An in-app notification will appear confirming the case has been successfully created, and clicking View Details in the notification will display the Case's details from the Workbench.