The SOC Insight Report Viewing Insight Comments tab enables users to write and post comments about specific insights. It includes a comments field where users can add their comments along with their contact information. The comments panel displays all the posted comments, including the name and contact information of the person who posted the comment, the date and time of the comment, the action associated with the comment, and a copy of the comment. Users can also edit insights by changing the insight status from open to closed or vice versa in the Edit Insights window, leave a comment during the status change, and view prior comments associated with the insight.

Image: A detailed view of the SOC Insights - Viewing Insight Comments dashboard used for managing SOC insights. The Viewing Insight Comments dashboard is designed to facilitate collaboration and communication among team members by allowing them to post comments and keep track of actions taken in response to cybersecurity threats.

The Dashboard

Insight Summary: The Insight Summary includes a brief description for the selected Insight.

Comments Field: The comments field allows for the writing and posting of comments about an Insight.

Priority Notification: The priority rating card displays the following information about the Insight:

Priority: The Insight's priority level (High, Medium, Low, or Info).
Date and time: The Insight's date and time of first detection and for its most recent detection. All times are adjusted to the local time zone.

Copy Insight: Clickthe copy icon to copy the insight to the clipboard.

Edit Insight: Clickthe edit icon to change the status of an insight The Insight Change Status window will appear. In the window, you can change the Insight status from Insight Open to Insight Close or Insight Close to Insight Open by toggling the status switch. Optionally, you can leave a comment in the text field at the time of the status change. Finally, you can read prior comments associated with the Insight. Click Save & Close to complete the Insight status change. Do note that the Save & Close button will not be accessible (it will be grayed out) until such time a status change has been made for the Insight.

Image: A detail view of the Edit Insight window.

Share & Export Options: Click Share & Export to share a selected Insight within your organization. The Share Insight window will appear where you can choose from among the listed data options. Raw logs are downloaded in zip format by clicking Download.

Image: A detail view of the Share Insight window.

Comments Panel: The comments panel displays information posted comments associated with an Insight. The information shared includes the name and contact information for the person posting the comment, the date and time the comment was posted, the action associated with the comment, and a copy of the posted comment.

Post: Click Post to publish a comment about an Insight to the page. Do note that the Post button will not be accessible (it will be grayed out) until such time a comment has been added in the comment field. Refer to call-out B for more information.

You can also do the following on the page:

Background Tasks: Click the hourglass icon to open the side panel to view a list of all running background tasks.
Search: Click the search icon in the Search text box, then enter your search criterion.
Pagination Controls: At the bottom left, there are controls for navigating through different pages of insights, indicating that there is more data available beyond what is displayed on the current page. Click on the number of insight records to display on the page. The options include, 25, 50, or 100.
Click <Back to Console of Insights to return to the Open Insights console.