Update information in security incident related records

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 1 Minute Lesedauer

    • Edit related records for a security incident in Security Incident Response Workspace directly from the Related Records tab without having to leave the current context.

    Vorbereitungen

    Limitations:
    • You can't modify fields that are restricted by an access control list.
    • Fields updated or added by system such as Updated aren’t supported for inline editing.

    Role required: sn_si.analyst

    Prozedur

    1. Navigate to Workspaces > Security Incident Response Workspace.
    2. Open a security incident.
    3. Select the Related Records tab.
    4. Open the related records tab for which you want to update information.
      For example, to update the associated observables records of a security incident, you would select Threat Intel and then select Associated Observables.
    5. Select the fields to update.
    6. Update the values of the fields.