Detail¶

Event Detail¶

Shows the time when user first opened the event

Redirects user to block IP page with office/agent/block fields pre-filled based on event information

Redirects user to create ticket page with fields pre-filled based on event information

This function will explain, analyze alerts, and provide handling suggestions for Tier 1

Assign the event to yourself.

This feature is equivalent to "Add to Favourites", allowing users to mark (like) events they want to save for reference or review later.

Liked events will be centrally managed on the My Events page.

Helps quickly save notable or analytically valuable events.
Supports building sample or typical event lists for training and future reference.
Improves personal event information management efficiency, helping Tier 1 easily access when needed.
Contributes to standardizing event storage and sharing within SOC incident handling team.

This feature is used to save (star) important events that users want to follow up or handle later.

Helps quickly mark suspicious or important events for later review.
Supports organizing and classifying personal events, avoiding missing important alerts.
Improves handling and priority monitoring efficiency during shifts.
Creates personal watchlists helping Tier 1 conveniently during handover or continued investigation.

Area displaying detailed information of Event.

This feature allows adding notes or comments directly to each event.

Users can use this to describe cause, analysis results, or handling direction for that event.

Helps record investigation content, assessments, or handling actions right in each event.
Increases information linking and sharing between shifts or between levels in SOC.
Supports tracking event handling history, avoiding duplication when multiple people work on it.
Contributes to improving coordination effectiveness and transparency in event monitoring process.

Add note

Edit note

Delete note