Investigate Cases
Learn how to investigate and mitigate security threats as a SOC analyst using Torq case management.
18 articles
- Navigating Torq's Cases Page: Stay on Top of CasesLearn how to track active and resolved cases on the Cases page efficiently.
- Inside a Case: Investigate Cases in TorqLearn how to navigate through a case to easily review threat details, track investigations, and take actions.
- Creating Cases in TorqLearn how to create a new case, including the necessary and optional attributes.
- Case Timelines in Torq: Track Investigation ProgressLearn how to effectively log and retrieve information using the case timeline.
- Custom Fields in Torq Cases: Track Additional Case DetailsLearn about custom fields in Torq cases, ensuring all relevant details are considered for a comprehensive review.
- Observables: Enhance Threat Detection with TorqLearn about observables in Torq and how to use and manage them efficiently.
- Notes in Torq Cases: Efficiently Store InformationLearn how to store information within Torq cases efficiently with notes.
- Attachments in Torq Cases: Add Context and InformationLearn how to use attachments in Torq cases to enrich context and add information through screenshots, documents, and other files.
- Link Related Cases in Torq: See the Bigger PictureLearn how to link related cases, enabling better identification and tracking of interconnected incidents.
- Runbooks in Torq Cases: Streamline Investigations with InstructionsLearn how to follow runbook instructions in Torq to ensure efficient and standardized investigations.
- Trigger Workflows from Torq Cases: Take Action During InvestigationsLearn how to use workflows during your case management investigations by triggering them directly from a case.
- Case SLAs in Torq: Track DeadlinesLearn about SLA tracking with Torq to ensure timely case resolution.
- Torq's All Workspaces View: Manage Cases Across Multiple WorkspacesLearn how to handle cases across multiple workspaces without needing constant workspace switching.
- Case Reviewer: Ensure Investigation Quality in Torq's HyperSOCEnsure quality and compliance by assigning reviewers to approve or reject case investigations before taking further action.
- Auto-Generate Resolution Details with Socrates AIUse Socrates to auto-generate case resolution details based on relevant case data.
- Restrict Cases Access: Ensure Information ConfidentialityEnsure information privacy by controlling who has access to specific cases.
- Embedded Details in Case DescriptionsLearn how to embed details directly in case descriptions to spotlight critical case details.
- Custom Case TabsLearn how to create and manage custom tabs for cases.