Torq

With Torq, security teams can automate case management: create, update, investigate, and resolve cases in response to security alerts, ensuring quick prioritization and handling. Torq cases are based on Torq's powerful no-code automation platform, allowing you and your team to fully automate the case lifecycle to ensure team members are exposed to less noise and can focus on high-priority items.

Torq cases are <a href="https://schema.ocsf.io/" target="_blank" rel="nofollow noopener noreferrer">OCSF-compliant</a>, flexible, and easily extensible to fit your organization's needs. Together with automation, they can be used to orchestrate any analysis and remediation flows efficiently. Go to the <b><a href="https://app.torq.io/cases" target="_blank" rel="nofollow noopener noreferrer">Cases</a></b> page to view the active or recently resolved cases.

<a href="https://kb.torq.io/en/articles/9165278-enrich-and-act-on-timeline-comments-for-efficient-investigations-with-torq-automation">Case timeline to summarize the course of the investigation</a>

<a href="https://kb.torq.io/en/articles/9165031-automatically-manage-cases-with-torq-workflows">Automatically create, update, process, and resolve cases using Torq steps</a>

<a href="https://kb.torq.io/en/articles/9095629-automating-observables-enhance-threat-detection-with-torq">Observables to track indicators: View the cases a single observable is associated with to discover relationships between seemingly unrelated events</a>

<a href="https://kb.torq.io/en/articles/9138475-trigger-workflows-with-torq-case-management-events">Use events in the case lifecycle, such as adding a new observable, changing the severity, and more, to trigger workflows to automate case management</a>

<a href="https://kb.torq.io/en/articles/9172977-get-the-full-picture-automatically-link-related-cases-in-torq">Link related cases for a comprehensive understanding of the broader context</a>

<a href="https://kb.torq.io/en/collections/9232840-customize-torq-case-management">Customization options</a>

<a href="https://kb.torq.io/en/articles/9138461-monitor-case-management-torq-s-cases-dashboard">Use the Cases dashboard to track essential case management metrics</a>

- <a href="https://kb.torq.io/en/articles/9165278-enrich-and-act-on-timeline-comments-for-efficient-investigations-with-torq-automation">Case timeline to summarize the course of the investigation</a>
- <a href="https://kb.torq.io/en/articles/9165031-automatically-manage-cases-with-torq-workflows">Automatically create, update, process, and resolve cases using Torq steps</a>
- <a href="https://kb.torq.io/en/articles/9095629-automating-observables-enhance-threat-detection-with-torq">Observables to track indicators: View the cases a single observable is associated with to discover relationships between seemingly unrelated events</a>
- <a href="https://kb.torq.io/en/articles/9138475-trigger-workflows-with-torq-case-management-events">Use events in the case lifecycle, such as adding a new observable, changing the severity, and more, to trigger workflows to automate case management</a>
- <a href="https://kb.torq.io/en/articles/9172977-get-the-full-picture-automatically-link-related-cases-in-torq">Link related cases for a comprehensive understanding of the broader context</a>
- <a href="https://kb.torq.io/en/collections/9232840-customize-torq-case-management">Customization options</a>
- <a href="https://kb.torq.io/en/articles/9138461-monitor-case-management-torq-s-cases-dashboard">Use the Cases dashboard to track essential case management metrics</a>

Get an overview of Torq case management with recommended articles for further exploration.

Key features