Investigate Cases
Learn how to investigate and mitigate security threats as a SOC analyst using Torq case management.
19 articles
Navigating Torq's Cases Page: Stay on Top of CasesLearn how to track active and resolved cases on the Cases page efficiently.
Creating Cases in TorqLearn how to create a new case, including the necessary and optional attributes.
Case Timelines in Torq: Track Investigation ProgressLearn how to effectively log and retrieve information using the case timeline.
Custom Fields in Torq Cases: Track Additional Case DetailsLearn about custom fields in Torq cases, ensuring all relevant details are considered for a comprehensive review.
Observables: Enhance Threat Detection with TorqLearn about observables in Torq and how to use and manage them efficiently.
Notes in Torq Cases: Efficiently Store InformationLearn how to store information within Torq cases efficiently with notes.
Attachments in Torq Cases: Add Context and InformationLearn how to use attachments in Torq cases to enrich context and add information through screenshots, documents, and other files.
Link Related Cases in Torq: See the Bigger PictureLearn how to link related cases, enabling better identification and tracking of interconnected incidents.
Runbooks in Torq Cases: Streamline Investigations with InstructionsLearn how to follow runbook instructions in Torq to ensure efficient and standardized investigations.
Events in Torq Cases: Track Investigation-Related EventsLearn how to view and analyze events attached to Torq cases.
Trigger Workflows from Torq Cases: Take Action During InvestigationsLearn how to use workflows during your case management investigations by triggering them directly from a case.
Case SLAs in Torq: Track DeadlinesLearn about SLA tracking with Torq to ensure timely case resolution.
Torq's All Workspaces View: Manage Cases Across Multiple WorkspacesLearn how to handle cases across multiple workspaces without needing constant workspace switching.
Tasks in Torq Cases: Track and Complete Your AssignmentsLearn how to navigate and complete tasks within your cases.
AI-Generated Case Summaries: Streamline Your InvestigationsLearn how to use the AI-generated case summary to quickly catch up on the investigation status, key findings, and potential impacts.
Case Reviewer: Ensure Investigation Quality in Torq's HyperSOCEnsure quality and compliance by assigning reviewers to approve or reject case investigations before taking further action.
Auto-Generate Resolution Details with Socrates AIUse Socrates to auto-generate case resolution details based on relevant case data.
Restrict Cases Access: Ensure Information ConfidentialityEnsure information privacy by controlling who has access to specific cases.
Embedded Details in Case DescriptionsLearn how to embed details directly in case descriptions to spotlight critical case details.