Creating a New Task
Default ThreatQ Role: Administrative, Maintenance, or Primary Contributor
Custom Role - Action Permissions: Artifact Management - Investigations
Investigation owners, as well as users with Editor permissions for the investigation, can create and assign new tasks to an investigation or to an object that is part of an investigation.
Creating a New Task for an Investigation
ThreatQ allows you to create and assign tasks to yourself or other users in the platform. You can also use tasks in ThreatQ Investigations. When you assign a new task, you can add contextual information and correlate with Indicators, Events, Adversaries, Signatures, and Files.
For more information about Tasks, see the ThreatQ Platform documentation.
- Right-click on an empty portion of the evidence board and select New Task.
The Add Task dialog box opens.
- Enter a task Name.
- Enter the assignee's email address in the Assigned To field.
- Optionally, use the date picker to select a Due Date.
- Select one of the following statuses:
- To Do
- In Progress
- Review
- Done
- Select one of the following task priorities:
- Low
- Medium
- High
- Optionally, enter any Associated Objects.
- Enter a Description for the task.
- Click Save.
The task is added to the evidence board and the timeline.
Creating a New Task Related to an Object
ThreatQ allows you to create and assign tasks to yourself or other users in the platform. You can also use tasks in ThreatQ Investigations. When you assign a new task related to an object on the evidence board, you are automatically adding contextual information and correlating the task with the selected object.
If an investigation owner or editor create a task for user who does not have access to the investigation, the user can access the task via Threat Library. However, he cannot view the investigation unless an owner or editor shares the investigation with him. In the Threat Library detail page, the Owner column lists the name of the investigation user so that the user can request access if needed.
For more information about Tasks, see the Tasks topic.
- On the evidence board, select and highlight the node that represents the object you want to create a task for.
- Right-click on the object and select New Task.
The Add Task dialog box opens. - Populate the following fields:
Field Name Description Name Enter the task name. Assigned To Enter the assignee's email address. Reporter Enter the email address of the reporter. Due Date Use the date picker to select a due date. Status Select a status for the task. Priority Select a priority for the task. Related Objects Use the search field to locate and add associated objects. Description Enter a brief description of the task. - Click Save.
The task is added to the evidence board and the timeline.