One of the most valuable features of ThreatConnect® is the ability to manage a team’s workflow. With the right permissions, a user is able to assign fellow team members with specific Tasks to complete. In addition, this feature can auto-generate reminder emails, as well as establish incorporated deadlines. With this feature, creating or editing a Task is as simple as uploading or editing an Indicator.
- From the top navigation bar (Figure 1), place the cursor over CREATE and then over the GROUP option. Click on the TASK object, and the Create Task screen will appear with the Details sub-screen selected (Figure 2).
- Type: Leave this field set as Task.
- Owner: Choose the Organization, Community, or Source that will own the Task.
- Summary: Use this section to enter a name for the Task. The format [Incident Review], followed by the Incident name, is recommended, but is ultimately up to the user to determine.
- Status: Choose the current status of the Task from the dropdown menu.
- Reminder Date: Use the pop-up calendar to choose a date on which a reminder about the Task will be sent.
- Assign To: Use the dropdown menu to choose one or more people to whom the task is to be assigned.
- Due Date: Use the pop-up calendar to choose a due date for the task.
- Escalation Date: Use the pop-up calendar to choose an escalation date, if desired.
- Escalate To: Use the dropdown menu to choose one or more people to whom the task is to be escalated. If this date is met and the Task has not been completed, the system will assign the Task to another (perhaps more senior) individual.
- Description: Enter all Task-related instructions and information. Click the Apply Description to Associations checkbox to apply the description to the Task’s Associations.
- Tags: Enter all Tags associated with this Task. Click on the Plus (+) button to add each Tag. Click the Apply Tags to Associations checkbox to apply the Tags to all the Tag’s Associations.
- Apply Tags to Associations: Check this box to apply the Tags to the Group’s Associations.
- Follow: Click this checkbox to receive Task status notifications.
- Indicator Type: Select the type of Indicator to which to associate from the dropdown menu. Then, depending on the type of Indicator chosen, use the available fields to add the Indicator.
- Associations: This section will automatically reflect the Indicator(s) chosen in the Indicator Type section.
- Association Details: Enter a Description, Tags, Threat Rating, and Confidence Rating for the Association.