SecByte - How To - SIR Reporting Chart - Visualize Attack Categories
welcome back chris walker your security doctor reporting live for another sec byte demonstration around how we can create a simple chart that will provide power value and efficiency for your sock analysts and really anyone who is wearing a security hat so let's go ahead and get started here's our security incident record i'm going to go ahead and navigate into this particular instance here perfect now let's go over to the famous hamburger icon with the additional actions and go to configure clicking on form layout will bring us to the form layout options now i'm going to navigate to my asterisk which is going to take me to the chart option clicking this over to the selected area we can now go ahead and label our chart i'm going to go ahead and label this security incident response attacks and click save now this is going to provide more contextual insights for our security analysts but additionally this will allow me to then propose this as a major security incident if you're leveraging msim why is this relevant well in this case we have an outage and we have some type of sprawl as it pertains to the suspicious log4j vulnerability and with this chart we're going to be able to see if this is actually occurring in other security incidents that are tied to the specific attack category so you guessed it configure chart next i'm going to select the out of the box report here called security incidents by attack category so servicenow in the security operations offering has already done the heavy lifting for you select your report and click update and just like that we now have a real-time report for security incidents by attack category for more information feel free to visit us at servicenow.com and as always stay safe
https://www.youtube.com/watch?v=KmxXPsj16Ns