Skip to content

From template#

Create a new case from templates

1. Create a new case from EDR template.#

  1. Enter the case title in the Title.
  2. Select the date from the Date.
  3. Select Severity, (Low/Medium/High/Critical).
  4. Select TLP, (White/Green/Amber/Red).
  5. Select PAP, (White/Green/Amber/Red).
  6. Click + to add Tags. (Refer to Add tags.)
  7. Enter the case description in the Description.
  8. Choose a Task rule from the list, (manual/existingOnly/upcommingOnly/all).
  9. Choose an Observable rule from the list, (manual/existingOnly/upcommingOnly/all).
  10. Add Tasks. (Refer to Add tasks. / Edit tasks. /Delete tasks.)
  11. Add Custom Fields. (Refer to Add custom field values. /Edit custom field values. /Delete custom field values.)
  12. Click the Confirm case creation button.

create case from edr template

2. Create a new case from Phishing template.#

  1. Enter the case title in the Title.
  2. Select the date from the Date.
  3. Select Severity, (Low/Medium/High/Critical).
  4. Select TLP, (White/Green/Amber/Red).
  5. Select PAP, (White/Green/Amber/Red).
  6. Click + to add Tags. (Refer to Add tags.)
  7. Enter the case description in the Description.
  8. Choose a Task rule from the list, (manual/existingOnly/upcommingOnly/all).
  9. Choose an Observable rule from the list, (manual/existingOnly/upcommingOnly/all).
  10. Add Tasks. (Refer to Add tasks. /Edit tasks. /Delete tasks.)
  11. Add Custom Fields. (Refer to Add custom field values. /Edit custom field values. /Delete custom field values.)
  12. Click the Confirm case creation button.

create case from phishing template

Add tags#

  1. Choose tags from the Taxonomy. The selected tag will appear in the Selected Tags box
  2. Click the Add selected tags button.

select tags

Add tasks#

The task Group is default.

  1. Enter the task Title.
  2. Enter the task description in the Description.
  3. Select the Due date.
  4. Click Save.
  5. Click Save and add another, to add another task.

add tasks

Add custom field values#

  1. Select custom field value from the given list. (location/business-unit/detection-source/test).
  2. Click Confirm custom field value creation.

custom field values

Edit tasks#

  1. Click the edit link.

edit task

A new window opens.

  1. Edit the required values
  2. Click the Confirm edition button.

edit task

Edit custom field values#

  1. Click the edit link.

edit custom field values

A new window opens.

  1. Edit the required custom field values
  2. Click the Confirm custom field value edition button.

edit custom field values

Delete tasks#

  1. Click the delete link beside the value that has to be deleted.

delete tasks

Delete custom field values#

  1. Click the delete link beside the custom field value that has to be deleted.

delete custom field values