Create cases to track and investigate security incidents efficiently with Torq.
To create a case manually go to the Cases page and click Create.
Key parameters for case creation
When setting up a case, you'll need to fill out several parameters to ensure all the relevant information is captured:
Parameter | Description |
Title | Assign a descriptive title to make the case easily searchable. Include key identifiers such as the incident type or involved vendors. |
Resolution SLA | Resolution Service Level Agreement. The duration in which the case should be resolved or closed. Disabling the SLA target toggle allows you to set the Resolution SLA without a target duration, allowing for flexible monitoring without fixed deadlines. |
Severity | Choose from predefined severity levels:
These align with the OCSF schema event severity identifier. For additional severities, contact Torq support. |
Description (optional) | Provide information that should be available to anyone reviewing the case. You can apply formatting to the case description by using markdown syntax. |
State | Select an appropriate state for the case, such as New, In Progress, On Hold, Resolved, or Closed. You can also integrate custom states tailored to your processes. |
Reported by | Automatically captured based on the creator of the case—user email for manual entries and workflow execution ID for automated creation. |
Assigned to | The email address of the team member assigned to the case. |
Group assignee | The name of the group assigned to the case. |
Reviewer | The email address of the team member who will peer review the case. |
Category | Select a category from the suggestions list or create a custom category by typing it in. |