Use Case Builder v1.0.14
To streamline the Use Case Design process and provide tools to help you get into production faster!
- Author:
- Joe Cosgrove
- Support:
- community
Dashboards (2)
- Use Case Automation
- Use Case Development Dashboard
Incident fields (55)
- Affected Host
- CVE Description
- CVE Reference Links
- CVE Score
- Custom Incident Data Structure
- Customer Name
- Deduplication Logic
- End-User Interactiveness
- Enrichment
- Incident Response Process
- Incident Structure and Mapping
- Manual Steps
- Network Security IDS
- Third Party Integrations
- Time to Investigate
- Time to Remediate
- Time to Triage
- Trigger
- Use Case Backlog Timer
- Use Case Builder Authentication
- Use Case Builder Auto Generator Key
- Use Case Builder Case Management
- Use Case Builder Data Enrichment and Threat Intelligence
- Use Case Builder Development Deadline
- Use Case Builder Email Gateway
- Use Case Builder Endpoint
- Use Case Builder Forensics and Malware Analysis
- Use Case Builder Getting Started
- Use Case Builder IAM
- Use Case Builder Network Security NGFW
- Use Case Builder Playbook Generator Key
- Use Case Builder SEIM
- Use Case Builder Use Case Containment Steps
- Use Case Builder Vulnerability Management
- Use Case Category
- Use Case Design Best Practice
- Use Case Development Stage
- Use Case Development Timer
- Use Case Enrichment Actions
- Use Case Enrichment Steps
- Use Case Ingestion Best Practice
- Use Case Initiator
- Use Case Name
- Use Case Pre-Production Timer
- Use Case Priority
- Use Case Production Timer
- Use Case Purpose
- Use Case Required Metrics and Notifications
- Use Case SLAs
- Use Case TIM Best Practice
- Use Case Testing Timer
- Use Case Type
- UseCaseAdoptionMetrics
- XSOAR Incident Flow
- subclassification
Incident types (3)
Layouts (1)
Scripts (11)
- CreateUseCaseStepsList
- CreateUseCaseTemplateList
- CreateXSOARIncidentFlowList
- DeleteAndExcludeIndicators
- GettingStartedWithXSOAR
- PlaybookAutoGeneratorDynamicSectionMessage
- StopUseCaseDevelopmentTimer
- UseCaseAdoptionMetrics
- UseCaseBuilderMarkdownToHTML
- UseCaseDevelopmentTimers
- UseCasePlaybookAutoGenerator
Widgets (13)
- Time Spent in Pre-Production
- Total Use Cases
- Use Case Backlog Time
- Use Case Development
- Use Case Time Spent in Testing
- Use Case time in Production
- Use Cases
- Use Cases In Pre-Production
- Use Cases On Track
- Use Cases in Backlog
- Use Cases in Development
- Use Cases in Production
- Use Cases in Testing
README
Use Case Builder Implementation Guide
The Use Case builder contains tools to help you measure and track use cases through your automation journey, quickly autogenerate OOTB playbooks and custom workflows and more.
Setup And Configuration
To run this content you will need to setup the Cortex REST API integration. To do this, simply download and install the content from the marketplace, generate a api key, then add your api key to the instance (Choosing the standard authentication method.) Once that is complete, you can start using the Use Case Builder!
Default Incident Type
This Pack includes an Incident Type of ‘Use Case Builder’, which is the starting point for creating new Use Cases. To use this, navigate to the +New Incidents -> Select Type -> Use Case Builder+ and fill out the form to begin.
Layouts
The Use Case type has an optimized layout for both the summary pages, and the new/edit screen. This layout includes some useful information and dropdowns to kickstart your automation journey
Playbook
The default playbook is Use Case Builder, this playbook is performs alot of complex task and time consuming actions for you. At it’s core the playbook simply does the following:
- Provide important information to get you started.
- Clones and Autogenerates playbooks based off your selections
- Set SLAs and Timers for the development stages
- Renders Markdown and HTML
- Generates the Use Case Defintion Document
- Evaluates XSOAR Usage and sets Adoption Metrics
Timers
Optionally this playbook has built in Timers for adding metrics for time spent In Development, Testing, Backlog, Production,etc.
Dashboards
This pack includes 1 dashboards:
- Use Case Development Dashboard: High level summary of all Use Cases in Development and their associated metric data.
Dynamic Sections
There are Several Dynamic sections in this pack such as the Getting Started, Common Use Cases and Incident Flow section which are your guide to following XSOAR Best Practices and creating great use cases