Today RSA enVision Event Explorer v4.0.2 was made generally available via SCOL for download.
This new release features a major redesign of the former Task Triage interface & functionality. Now called Incident Management mode, it provides the entry point to the incident handling process performed by a security analyst, allowing users to view, query, & manage incidents via a streamlined, intuitive interface.
In addition to the improved interface, key new features include:
- Set up custom queries and create pre-defined queries for incident retrieval
- Customize incident information displayed in the Incident list table
- More easily manage an incident (e.g. assigning incident to stakeholders, changing incident priority, escalating, closing, reopening, and deleting incident)
- Quickly view the primary information associated with an incident, e.g. log details, supporting attachments, comments, history
Enjoy! We’re planning a webinar to go into more detail and show a demo of the new capabilities in September, so you’ll see an invitation in the Intelligence Community shortly.
Please send us any and all feedback on the new release.
Thanks!
Debbie
