Incident Response (New Layout)
Notice
This feature is available in Respond (CFTR) v3.4.0 onwards.
Respond (CFTR) provides a new layout consolidating all incident details and actions of the incident response process into a single-pane view. The new layout also includes a quick-access bar to access features such as automation, connect the dots, playbooks, notes, and input required to expedite the incident response process.
The incident response process includes the following features:
Tab Name | Details |
|---|---|
This tab consolidates the key features of incident response into user-friendly cards. Visual representations of specific cards, such as Playbooks, Time Tracking, and others, provide an improved understanding and enhance overall data clarity. | |
This tab displays all the phases and actions associated with the incident that must be completed to close the incident. | |
This tab enables you to connect components and threat intel related to the incident to draw contextual information needed to identify the root cause of the incident. | |
This tab enables you to quickly perform actions and run playbooks related to the incident, simplifying the response process. | |
This tab enables you to view and track the emails received by the business units associated with the incident. |
You can perform other incident response operations, see Other Incident Response Operations.