Track case tasks

This document explains how to create and manage case-specific or general tasks, and assign them to a SOC role or team member. You can perform these actions directly within a case (such as from the top toolbar or Case Wall) or from Your Workdesk > My Tasks.

Add a task

To add a task within a case, follow these steps:

1. Open the relevant case.
2. Access the task creation menu:
   • In the enhanced experience, click Case Actions in the top menu (available across the Overview, Case Wall, Detections, or Playbooks tabs) and select Add Task.
   • In the legacy experience, click Case Task on the Overview tab.
3. In the Add Task dialog, enter the title, SOC role or team member, task content, and due date.
4. Click Save.

Assign the SOC role or team member

To change the SOC role or team member assigned to a task, follow these steps:

1. Open the tasks list within the case or on the Case Wall tab.
2. Select the task you want to assign.
3. Click the list next to Assigned to:.
4. Select the required SOC role or team member. The assignment is updated.

Close a task

To close a task, follow these steps:

1. Open the tasks list within the case or on the Case Wall tab.
2. Select the task you want to close.
3. Click Mark as done.
4. Enter a comment in the Comment field and then click Send.

For information about using tags to categorize cases and alerts, see Manage tags in cases and alerts.