Overview
Automatically manage case notes with case note steps. Use case note steps to provide important information, such as enrichment and analysis results, for case management teams to review at a glance. Mark a note as key to flag it for analyst attention, and mark it as public to enable sharing with external parties.
Build Torq Cases Notes steps into workflows to automatically:
Save important case details in an easily accessible location.
Store detailed information related to the case, such as scan results, reports, and more.
Mark notes as public to enable communication with external stakeholders.
Inform stakeholders of case note updates.
Automatically manage notes: Essential steps
Efficiently manage case notes in workflows with the following Torq Cases steps:
Adds a new note to a case
Get Case Note
List case notes
Remove note from case
Update Case Note
Use the Mark as key optional parameter (also available when updating notes) to highlight a note as key, ensuring it appears in the case Overview tab for better visibility.
The note body allows for up to 65,000 characters and supports HTML formatting.
Learn how to use notes during a case investigation.
Automate responses to note changes
Use the Note updated workflow trigger to execute a workflow whenever a note is added, updated, or deleted from the case.
Mark notes as public
Mark notes as public in your workflow to indicate their potential communication with external stakeholders outside Torq case management.
To mark a note as public in a workflow:
Select a note step: Insert the Add a new note to a case or Update case note steps into your workflow.
Set Visibility to Public: Enable the optional Visibility parameter in the step and set it to Public.
Manually mark notes as public in the Notes tab on the Cases page.
Use case: Automatically manage public notes
The note's visibility status is available when the note is retrieved. Use this status to share public notes outside of Torq case management.
To automatically share public notes:
Start a new workflow: Select the Note updated workflow trigger.
Set the visibility condition: Add a trigger condition to check that the note Visibility is set to Public.
Select case or note details to share: Use the Get case details step to extract information from the note.
Select a communications channel: Configure the workflow to send the extracted details to the appropriate channel or ticketing system.
Use case: Add IP enrichment results as a note
After conducting an observable enrichment, the results can be automatically added to the case as a note, ensuring that all relevant data is compiled and immediately accessible.
