Incident Management: Incident Queue Details View

on Jan 29, 2018

Version 2Show Document

In the Incident Queue Details view, you can see details of an incident or edit an incident.

To access the Incident Queue Details view:

In the Security Analytics menu, select Incidents > Queue.
The Incidents view is displayed.
Double-click one of the incidents.
The Incidents Queue details view is displayed.

Related procedures are available in View Incident Details.

Features

The following table lists the parameters displayed in the Incident Queue Details view.

Parameter	Description
Summary	Provides overall details for the risk alert.
Priority	Displays the priority of the task. This is an editable field.
Alerts	Displays the number of alerts.
Average Risk Score	Displays the average risk.
Created	Displays details about the date and time when the task was created and by whom it was created.
Updated	Displays the date and time when the task was last updated.
Sources	Displays where the incident came from.
Assignee	Displays the user to whom the incident is assigned to. This is an editable field.
Categories	Lists assigned categories.
Status	Displays the status of the incident. This is an editable field.

The following table lists the operations that can be performed in the Incident Queue Details view.

Parameter	Action
Back to Queue	Allows you to navigate back to Incident Queue view.
Close Incident	Allows you to close the current incident you are viewing.
Report a Data Breach	Sends a report of a data breach.
Edit All	Allows you to modify the incident as required.
Investigate Events	Allows you to closely investigate an event.
Investigate Source IP Address	Allows you to closely investigate IP Address of the Source.
Investigate Destination IP Address	Allows you to closely investigate IP Address of the Destination.
New Journal Entry	Allows you to create and publish a new journal entry.
New Remediation Task	Allows you to create a new remediation task.

You are here