The Case and Incident Management solution provides an interactive user interface for:

Triaging reported phishing emails from the Phishing Triage solution

Triaging alerts from the Alert Triage solution

Viewing, interacting with, enriching, and adding observables via the Threat Intelligence solution

Documenting research and notes regarding an investigation

Providing investigation details and knowledge base articles

Collecting granular metrics such as MTTR, MTTD, Dwell Time, etc

Identifying MITRE ATT&CK Phases

Working an investigation through its entire lifecycle, from signal ingestion through case and incident escalations, remediation, and resolution

SOC Solutions Bundle