As you view an investigation or incident, you can see various comments left by others. You can also add your own comments, which appear in blue.
After you make a comment, the SOC analysts are immediately notified.
- Log in to Workbench.
- Find the investigation or an incident to which you want to add a comment.
- Select Add Comment.
- In the dialog box that appears, type your comments.
- When you are done, select Add Comment.
Note
In addition to managing comments for investigations or incidents in Workbench, you can enable bidirectional messaging via Slack or Microsoft Teams.