Splunk SOAR Feature Video: Case Management
Case management functionality is built into Splunk SOAR. Using workbooks, you can codify your standard operating procedures into reusable templates. Splunk SOAR supports custom and industry standard workbooks such as the NIST-800 template for incident response. You can divide tasks into phases, assign tasks to team members, and document your work.
Related Videos
A Threat-Based Approach to Splunking the Measurable Value of your Security Data Sources
12 Angry Analysts: Tuning Splunk SOAR events to keep your analysts happy (or at least content)
