Creating Security Cases (Workbench)
Create Security Incident and Health Incident Cases from the Workbench by completing the follwing steps:
- Click + Create Case.
The Create Case window appears.
- Fill in the following fields:
- Case Title: Specifies the Case title.
- Case Type dropdown: Specified the Case type.
- Incident Category dropdown: Select from the list of incident categories.
- Case Priority: Specifies a priority level for the case.
- Detection Severity: Select from Low, Medium, High and Critical.
- Assigned To: Specifies an assignee for the Case.
- Notable Cause checkbox: Select this if the case already has a known cause.
- Threat Hunting checkbox: Select this if the case was discovered through threat hunting activities.
- Description: Optionally provide a description for the case.
- Click Save.
An in-app notification will appear confirming the case has been successfully created, and clicking View Details in the notification will display the Case's details from the Workbench.