Events
Case-Hub Event-Queue
Last updated
Case-Hub Event-Queue
Last updated
In Case-Hub, Any item in the Event Queue that you want to act on is considered an event. Events do not necessarily have to be connected to security, they could be network-related alerts, among others. Events serve as the primary action item for Analysts and Users of Case-Hub and will appear in the Event Queue as a card.
Events can exist in four different states to indicate where analysts are at in the triage process:
Status | Description |
---|---|
New
The default state for all new events (unless acted on by an Event Rule that overrides this status)
Open
Indicates that the event has been added to a case and is awaiting the analyst/client's input/review
Dismissed
State an event goes to when it has been automatically or manually dismissed
Closed
Indicates that the Event was worked in a case that has now been closed