Incident Manager

General

Many SIEM systems are able to detect security incidents by analyzing security logs, application logs, network devices logs and so on...

one of the challenges is what to do after an incident has been detected.

The solution includes the following features(Main features):

• Dashboard - This will help you get the big picture.
  
• Instructions - Each incident type can have specific instructions used by the security staff
  
• Knowledge Base - Each incident can have a knowledge based attached to it.
• Categories - Incidents are automatically routed to the relevant category.
  
• Assign to - Incidents can be forwarded when shift ends to another person.
  
• SLA - Managers can track how much time was spent for each incident