Skip to content
Working with TISC Context › TISC integration within SIR Workspace › Working with Security Incident Records › Use › Security Incident Response Workspace › Security Incident Response › Enterprise security case management applications › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

View related info from TISC

Use this section to view the related info such as related threat actors, attack patterns, campaigns, and cases from TISC in Security Incident Response Workspace.

Before you begin

Role required: sn_si.analyst

Procedure

  1. Navigate to Workspaces > Security Incident Response Workspace > Security Incidents > All.

  2. Locate and open any specific security incident that you're investigating.

    This can also be done by searching for the incident ID or browsing from Quick Filters section or filtering through incident state.

  3. Once the incident is open, navigate to TISC Context tab.

    View related information:

    Within the incident details, you can view related information in several sections.

    1. Select one or more observables.

    2. Select View Related Info button to view the related observables information.

      This section displays the associated information that are related to the selected observables.

      NameDescription
      Threat ActorsShows information from TISC for Threat Actors related to the selected observables.
      Attack PatternsShows information from TISC for Attack Patterns related to the selected observables.
      CampaignsShows information from TISC for Campaigns related to the selected observables.
      CasesShows information from TISC for TISC cases related to the selected observables.

Parent Topic:Working with TISC Context