Incident Management: Incident Queue Details View

Document created by RSA Information Design and Development on Jul 20, 2016
Version 1Show Document
  • View in full screen mode
 

In the Incident Queue Details view, you can see details of an incident or edit an incident.

To access the Incident Queue Details view:

  1. In the Security Analytics menu, select Incidents > Queue.
    The Incidents view is displayed.
  2. Double-click one of the incidents.
    The Incidents Queue details view is displayed.

Incident Queue Details.png

Related procedures are available in View Incident Details

Features

The following table lists the parameters displayed in the Incident Queue Details view.

                                                 
ParameterDescription
SummaryProvides overall details for the risk alert.
PriorityDisplays the priority of the task. This is an editable field.
AlertsDisplays the number of alerts.
Average Risk ScoreDisplays the average risk.
CreatedDisplays details about the date and time when the task was created and by whom it was created.
UpdatedDisplays the date and time when the task was last updated.
SourcesDisplays where the incident came from.
AssigneeDisplays the user to whom the incident is assigned to. This is an editable field.
CategoriesLists assigned categories. 
StatusDisplays the status of the incident. This is an editable field. 

Toolbar

The following table lists the operations that can be performed in the Incident Queue Details view.

                                             
ParameterAction
Back to QueueAllows you to navigate back to Incident Queue view.
Close IncidentAllows you to close the current incident you are viewing.
Report a Data BreachSends a report of a data breach.
Edit AllAllows you to modify the incident as required.
Investigate EventsAllows you to closely investigate an event.
Investigate Source IP AddressAllows you to closely investigate IP Address of the Source.
Investigate Destination IP AddressAllows you to closely investigate IP Address of the Destination.
New Journal EntryAllows you to create and publish a new journal entry.
New Remediation TaskAllows you to create a new remediation task. 
You are here: Incident Management Reference Information > Incident Queue View > Incident Queue Details View

Attachments

    Outcomes