Current ThreatQ Version Filter
 

Creating a New Task

THREATQ REQUIRED PERMISSIONS

Default ThreatQ Role: Administrative, Maintenance, or Primary Contributor
Custom Role - Action Permissions: Artifact Management - Investigations

Investigation owners, as well as users with Editor permissions for the investigation, can create and assign new tasks to an investigation or to an object that is part of an investigation.  

Creating a New Task for an Investigation

ThreatQ allows you to create and assign tasks to yourself or other users in the platform. You can also use tasks in ThreatQ Investigations. When you assign a new task, you can add contextual information and correlate with Indicators, Events, Adversaries, Signatures, and Files.

For more information about Tasks, see the ThreatQ Platform documentation.

  1. Right-click on an empty portion of the evidence board and select New Task.



    The Add Task dialog box opens.

  2. Enter a task Name.
  3. Enter the assignee's email address in the Assigned To field.
  4. Optionally, use the date picker to select a Due Date.
  5. Select one of the following statuses:
    • To Do
    • In Progress
    • Review
    • Done
  6. Select one of the following task priorities:
    • Low
    • Medium
    • High
  7. Optionally, enter any Associated Objects.
  8. Enter a Description for the task.
  9. Click Save.

    The task is added to the evidence board and the timeline.

Creating a New Task Related to an Object

ThreatQ allows you to create and assign tasks to yourself or other users in the platform. You can also use tasks in ThreatQ Investigations. When you assign a new task related to an object on the evidence board, you are automatically adding contextual information and correlating the task with the selected object.

If an investigation owner or editor create a task for user who does not have access to the investigation, the user can access the task via Threat Library.  However, he cannot view the investigation unless an owner or editor shares the investigation with him.  In the Threat Library detail page, the Owner column lists the name of the investigation user so that the user can request access if needed.

For more information about Tasks, see the Tasks topic.

  1. On the evidence board, select and highlight the node that represents the object you want to create a task for.

    Highlight the Node
  2. Right-click on the object and select New Task.

    View Node Details

    The Add Task dialog box opens.
  3. Populate the following fields:
    Field Name Description
    Name Enter the task name.
    Assigned To Enter the assignee's email address.
    Reporter Enter the email address of the reporter.
    Due Date Use the date picker to select a due date.
    Status Select a status for the task.
    Priority Select a priority for the task.
    Related Objects Use the search field to locate and add associated objects.
    Description Enter a brief description of the task.
  4. Click Save.

    The task is added to the evidence board and the timeline.