D3 Forms

LAST UPDATED: OCT. 9, 2024

Introduction

The D3 Forms module is a web-intake reporting tool designed to reduce response times and enhance overall effectiveness of security operations. Users can timely report suspicious activities—such as phishing attempts, unauthorized access, or system vulnerabilities—through the completion of custom web forms. Submitted data are automatically integrated into the D3 platform, thereby triggering predefined workflows that ensure a swift and efficient response. By using D3 Forms, organizations can establish a comprehensive end-to-end incident reporting solution, empowering security teams to respond promptly.

Form Setup

READER NOTE

Contact D3 for assistance with setting up your form. Our team will ensure a smooth and efficient implementation tailored to your needs.

Form Portal and Form Submissions

Navigating to the Form Portal

1. Configure your Form Escalation Settings and navigate to your form portal.

   

   1. Click on the Configuration menu item.

   2. Click on the Application Settings icon.

   3. Click on the Form Configuration navigation panel.

   4. Set up your auto-escalation using the input/dropdown fields.

   5. Click on the Save button.

   6. Copy the URL from the header above and paste it into a new browser tab.

READER NOTE

The URL of the form portal will conform to the following structure:

TEXT

https://<domain>/<path>/VSOC/ealert/default.aspx

2. Click on the corresponding button for your Form application within the portal.

   

Filling Out the Form Application

1. Complete the Form application. The General Information section will be included by default.
   

   

ALERT

Users must complete the form within 30 minutes. The form will reset automatically after this time, prompting you to start over.

2. Click on the Submit button after filling in all the appropriate fields.

   

3. Record your ticket number.

   

Example: Reporting a Case of Unauthorized Access

In the event of an unauthorized access incident targeting an organization, it is crucial to document the time, location and severity of the occurrence. A section addressing this may appear as follows:

Additionally, the organization may need to determine whether any assets have been compromised or otherwise impacted. A section for this information may be structured as follows:

Finally, the organization would benefit from understanding the remediation actions already taken in response to the incident. The final section of the form may resemble the following:

Viewing Forms in D3

1. Click into the incident that the Form had escalated.

   

   1. Click on the Investigation Dashboard module within the top navigation menu.

   2. Select your site (as configured by D3 during the form setup process).

   3. Click on the Incidents accordion.

   4. Click on All Incidents.

   5. Filter for and click into the incident that the Form had escalated.

2. Verify the ticket number and review all details.

   

   1. Verify the ticket number within the Description section. The ticket number should match the one recorded in step 3 of the Filling Out the Form Application section.

   2. Review the remaining content in the Description section. The options and input from the form will be located here.

   3. Review the file(s) that are present under the Files section.