Skip to content
This repository has been archived by the owner on Mar 17, 2022. It is now read-only.

Make and manage persistent observable comments #122

Open
seanmcfeely opened this issue Aug 17, 2020 · 0 comments
Open

Make and manage persistent observable comments #122

seanmcfeely opened this issue Aug 17, 2020 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@seanmcfeely
Copy link
Contributor

Sometimes you figure something unique out when working an alert, and it would be valuable for a comment to persist while it's relevant so that other analysts don't have to re-do analysis work.
For example, if an analyst discovers that a certain user uses a VPN service on his/her system then the following comment could be added to the relevant user observable:

This user uses [example VPN solution ](https://fake.vpn.example.com) on his/her system.
As discovered through these details:
        - detail
        - detail

Also, blah blah blah.

^ Make the comments so they can be expressed in markdown. This will add flexibility on the presentation. These comments should be editable directly in any alert where the observable is found.

@seanmcfeely seanmcfeely added the enhancement New feature or request label Aug 17, 2020
@seanmcfeely seanmcfeely self-assigned this Aug 23, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant