Mobile App User Guide
Orchestrate is a SOAR platform that supports any-to-any vendor agnostic orchestration to connect and automate IT, Devops, and most importantly cyber security workflows across deployment environments. Using Orchestrate, Playbooks can be developed with logical and intuitive workflows for your orchestration needs in an easy-to-use and robust Playbook canvas.
To empower security analysts to respond to security threats remotely, we have integrated Orchestrate into our existing Cyware Enterprise Mobile App. The mobile version of Orchestrate lets security analysts/admins receive and respond to notifications on the go from any mobile device.
The Orchestrate mobile app is primarily designed to help security analysts to receive and act on notifications on-the-go from a mobile device without having to access the Orchestrate web portal to provide approvals or updates for a Playbook.
The notifications are primarily classified as:
Informational notifications: We understand how important it is for you to keep up-to-date with the status of the Playbooks you follow on Orchestrate. You can now receive these informational notifications or push notifications on your mobile device, which eliminates the need of you having to access the Orchestrate web portal on your laptop each time to view these updates. These notifications do not require any user actions.
For example, admins receiving notifications on Instance/Tenant Expiry or System Errors on their Orchestrate platform.
Actionable notifications: Actionable notifications are sent to users when it requires a specific action from users. Analysts/admins can provide approvals (in the form of Yes/No button click) and responses (text/integer/date) for resuming the Playbook execution. This helps to act instantly on potential threats. They are available as Pending Actions, and then moved under Responded Re quests once responded.
Note
The content of this document is intended for users who have existing accounts in Orchestrate web portal. This document highlights the supported features of Orchestrate mobile app.
Features
Orchestrate mobile app offers the following features:
Pending Actions: You can provide approvals (in the form of Yes/No button click) and responses (text/integer/date) for resuming the Playbook execution from any place and from any device.
Responded Actions: You can view all the responses provided by you or other members of the user group for various Playbook executions. If a pending action which you have received as a notification has been responded to by any other user belonging to the same group, then it will be displayed under Responded Actions.
Notifications: These are informational notifications. You can view updates to a Playbook you follow or be notified when an app instance is expiring soon.
QR Code Login: This makes it easy for mobile users to sign in and use the features using the QR Code Login feature. The QR code is available and displayed on the Orchestrate web portal. Mobile app users can simply scan the QR code to authenticate and access the mobile app features.