Assigning Incidents

Assign ownership to keep your security team up to date on incidents.

Assigning ownership allows you to specify which team members within your organization you want to track and receive notifications regarding specified incidents. Each team member must have a Trend Vision One account. You can assign multiple accounts to an incident, and can assign multiple incidents at a time.

Note:

You can also assign alerts to your team members. For more information, see Assigning Alerts.

  1. Go to XDR Threat Investigation > Workbench > Incident View.
  2. Select one or more incidents.
  3. Click Assign Owner.
  4. Specify one or more Trend Vision One accounts as the Assignee.
  5. Click Apply.
    Important:

    Adding new assignees overrides the current owners for the specified incidents.

    Note:

    To remove all owners from an incident with assigned owners, leave the Assignee field empty and click Apply.

Parent topic: Incident View