logo

NJP

Linking Records in Major Security Incident Management Workspace

Import · Oct 13, 2022 · video

[Music] foreign [Music] it's Justin thank you for watching and welcome to Justin's house today I got a short one for you a short one but a good one hopefully and it has to do with security incident response I am in the major security Incident Management workspace you know I love workspaces and what I've got on the screen here is a demo ransomware attack that has been escalated to a major security incident I haven't done a tour of this workspace I'm going to shortcut to something new in Tokyo because I want my security people to see that this is there now and that is this linked records tab on the workspace itself where we can see security incidents we can see the remediation tasks and we can see um well they're not showing here security cases coming from threat intelligence so that's not particularly new what's actually new is a button here to actually provide a way to pull those in so if I click on link record I get a nice list of security incidents that I can check a box check multiple boxes no I can't check multiple boxes just found that out so I could check one box and then that can link it to this particular major security incident I get a notification that it was linked successfully and that the roll-up of related records will be processed as a background task okay so one more thing to show you on this one if I click on this link record here again it's not just security incidents that I can link I can also link remediation tasks like you just saw on the previous screen so there's some remediation tasks and security cases not sure why it didn't show up back here for security cases so as a live experiment I'm going to go ahead and select the security case and Link it to the major security incident that I have up here in the background it says it linked it successfully I got the same prompt that the roll-up of related records will be processed in the background and let's see if it shows up here yes it does so I've got security cases now in my drop down I've got security incidents in my drop down and I've got remediation tasks in my drop down so what I see is really nice is if someone hasn't come in here and linked a remediation task a security incident or a security case then we don't get it as an option let's try that out live let's see how that works I'm looking at remediation tasks this is over in vulnerability management I'm going to use the unlink record and unlink that from this particular major security incident here we go on the link and what I'm expecting now over here in this drop down all I should see is security incidents and security cases I shouldn't see those remediation tasks option anymore because I removed the only one that was in there so that's how it worked this is what's new for security incidents in Tokyo actually this is what's new for major security Incident Management in Tokyo a quick way to bring in your linked or related security incidents remediation tasks and security cases to your major security incident that you're managing I hope you found this video helpful if you did please like Please Subscribe or share with somebody who you think might be interested in major security Incident Management and until next time don't forget to always be learning [Music] foreign [Music]

View original source

https://www.youtube.com/watch?v=yEnYJTj-7D0