View related info from TISC

  • Release version: Yokohama
  • Updated January 30, 2025
  • 1 minute to read

    • Use this section to view the related info such as related threat actors, attack patterns, campaigns, and cases from TISC in SIR workspace.

    Before you begin

    Role required: sn_si.analyst

    Procedure

    1. Navigate to Workspaces > Security Incident Response Workspace > Security Incidents > All.
    2. Locate and open any specific security incident that you are investigating.
      This can also be done by searching for the incident ID or browsing from Quick Filters section or filtering through incident state.
    3. Once the incident is open, navigate to TISC Context tab.
      Viewing View Related Information:

      Within the incident details, you can view related information in several sections.

      1. Select one or more observables.
      2. Click on View Related Info button.
        This section displays the associated information that are related to the selected observables.
        Name Description
        Threat Actors Shows information from TISC for Threat Actors related to the selected observables.
        Attack Patterns Shows information from TISC for Attack Patterns related to the selected observables.
        Campaigns Shows information from TISC for Campaigns related to the selected observables.
        Cases Shows information from TISC for TISC cases related to the selected observables.
        TISC Context - View Related Info.