Widgets
LAST UPDATED: JAN 15, 2024
The incident workspace now includes updated and new widgets, customizable via the Incident Workspace Builder. Each widget can be expanded or restored to their default size using their (expand) and (shrink) interactive icons.
Header Panel
The general information header panel now features a modernized design, presenting key incident details.
Ad-hoc Task Widget
The Tasks widget has been redesigned to provide a clear view of completed, upcoming and overdue tasks. It includes a graphical progress bar to visually track completion.
Rather than scrolling to this section and clicking the + button, task delegators can use the Ad-hoc Tasks quick action available in the header panel.
Adversary Lifecycle Widget
The Adversary Lifecycle (previously Tactics & Techniques) widget has been redesigned to intuitively showcase tactic and technique details specific to the current incident, providing clear and comprehensive insights for each item.
Clicking on the button beside the Adversary Lifecycle widget header will render a popup. The dropdown menu within this popup contains built-in and custom tactics and techniques.
Conclusion Widget
Users can use the Conclusion widget to record a summary for the incident’s resolution using an HTML editor.
To edit the content, hover over the widget and click on the icon.
To clear the HTML widget, hover over the widget, click on the icon, then click on the Clear button.
Custom Fields Widget
The Custom Fields widget allows users to add custom fields and values to incorporate information about the incident beyond what appears in the Header Panel.
Description
The Description widget enables users to add or update the incident description using an HTML editor.
To edit the content, hover over the widget and click on the icon.
To clear the HTML widget, hover over the widget, click on the icon, then click on the Clear button.
Events Summary
The Events Summary widget provides summaries of events linked to the incident, including their linkage method, event ID and name, risk level, occurrence and last updated dates, and a link to access the event details pop-up window for linked events.
Files Widget
The Files widget has been redesigned to support file uploads via drag-and-drop or browsing.
Findings
The Findings widget enables users to view, add, and edit investigation findings directly from the Overview tab. The data displayed in this widget mirrors the information in the Findings section of the Investigation tab.
HTML Widget
The new HTML widget allows users to dynamically add custom HTML content, allowing the display of richly formatted information.
To edit the content, hover over the HTML widget and click on the icon.
To clear the HTML widget, hover over the HTML widget, click on the icon, then click on the Clear button.
Linked Incident Widget
The Linked Incidents widget has been updated to support bulk selection and display a structured layout of incident details, including the number, title, type, status, creation date, owner, and associated artifacts.
Hovering over the owner icon, the text after "Created On", or any artifact reveals a tooltip with additional details.
To copy a linked incident’s URL, hover over that incident and click on the icon.
To unlink an incident, hover over that incident and click on the icon.
Notes Widget
The Notes widget has been improved for greater clarity and differentiation between notes, with a keyword search feature added for easier retrieval.
Playbook Automation Widget
The Playbook Automation widget (formerly Playbook) now supports bulk selection, same-page unlinking and viewing, filtering of custom or built-in playbooks, and filtering by integration commands used within playbooks.
Clicking a playbook card renders a modal containing the executing playbook, identical to accessing it via the Playbooks sidebar menu.
Recommendations
The Recommendations widget enables users to view, add, and edit analyst recommendations directly from the Overview tab. The data displayed in this widget mirrors the information in the Recommendations section of the Investigation tab.
The process of adding a recommendation, whether with a data table or HTML Rich Text, is identical to adding a finding, with the exception that the category dropdown is available only for findings.
Remediations & Mitigations
The Remediations & Mitigations widget enables users to view, add, and edit analyst remediation and mitigation strategies directly from the Overview tab. The data displayed in this widget mirrors the information in the Remediations & Mitigations section of the Investigation tab.
The process of adding a remediation and mitigation strategy, whether with a data table or HTML Rich Text, is identical to adding a finding, with the exception that the category dropdown is available only for findings.
AI Summary Widget
The Summary widget mirrors the content of the Summary section in the Investigation sidebar menu.
Beside the Summary widget header is a light blue refresh icon . Clicking this icon securely generates a new summary using AI, improving incident reporting and team communication. This icon is accessible only to users with incident editing role, configured in the Organization Management module.
After an AI summary is generated, an label will render next to the Summary widget header. If the summary content is modified by a user, the label will be removed.