From template#
Create a new case from templates
1. Create a new case from EDR template.#
- Enter the case title in the Title.
- Select the date from the Date.
- Select Severity, (Low/Medium/High/Critical).
- Select TLP, (White/Green/Amber/Red).
- Select PAP, (White/Green/Amber/Red).
- Click + to add Tags. (Refer to
Add tags
.) - Enter the case description in the Description.
- Choose a Task rule from the list, (manual/existingOnly/upcommingOnly/all).
- Choose an Observable rule from the list, (manual/existingOnly/upcommingOnly/all).
- Add Tasks. (Refer to
Add tasks
. /Edit tasks
. /Delete tasks
.) - Add Custom Fields. (Refer to
Add custom field values
. /Edit custom field values
. /Delete custom field values
.) - Add Pages. (Refer to
Add pages
. /Delete pages
.) - Sharing (Refer to
Sharing
.) - Click the Confirm case creation button.
2. Create a new case from Phishing template.#
- Enter the case title in the Title.
- Select the date from the Date.
- Select Severity, (Low/Medium/High/Critical).
- Select TLP, (White/Green/Amber/Red).
- Select PAP, (White/Green/Amber/Red).
- Click + to add Tags. (Refer to
Add tags
.) - Enter the case description in the Description.
- Choose a Task rule from the list, (manual/existingOnly/upcommingOnly/all).
- Choose an Observable rule from the list, (manual/existingOnly/upcommingOnly/all).
- Add Tasks. (Refer to
Add tasks
. /Edit tasks
. /Delete tasks
.) - Add Custom Fields. (Refer to
Add custom field values
. /Edit custom field values
. /Delete custom field values
.) - Add Pages. (Refer to
Add pages
. /Edit pages
. /Delete pages
.) - Sharing (Refer to
Sharing
.) - Click the Confirm case creation button.
Add tags#
- Choose tags from the Taxonomy. The selected tag will appear in the Selected Tags box
- Click the Add selected tags button.
Add tasks#
The task Group is default.
- Enter the task Title.
- Enter the task description in the Description.
- Select the Due date.
- Click Confirm.
- Click Save and add another, to add another task.
Add custom field values#
- Select custom field value from the given list. (location/business-unit/detection-source/test).
- Click Confirm custom field value creation.
Add pages#
By selecting Create new page
- Enter the page Title.
- Enter or select the Category.
- Enter the page content in the content.
- Click Confirm.
- Click Save and add another, to add another task.
By selecting Use an existing page template
- Choose template(s) from those available in the list of existing templates
- Click Confirm.
- Click Save and add another, to add another task.
Edit tasks#
- Click the edit link.
A new window opens.
- Edit the required values
- Click the Confirm edition button.
Edit custom field values#
- Click the edit link.
A new window opens.
- Edit the required custom field values
- Click the Confirm custom field value edition button.
Delete tasks#
- Click the delete link beside the value that has to be deleted.
Delete custom field values#
- Click the delete link beside the custom field value that has to be deleted.
Delete pages#
- Click the delete link beside the value that has to be deleted.