This documentation supports the 25.1 version of BMC Helix for Security Incident Handling.To view an earlier version, select the version from the Product version menu.

Managing tasks from the runbook

As a case agent, you can manage the existing tasks in the runbook by working on them, changing their status, updating the details, adding notes, and finally marking them close. Each task in the runbook is assigned a stage that you cannot change. You can create ad hoc tasks and assign a stage to them.

Important

The stage value is not available for tasks that are created for lines of business other than the Security Incident Handling line of business.

Related topics

Security-stages

To work on a task in the runbook

  1. In a security case, on the Runbook tab, open an existing task.
  2. Open a task from the Runbook, and click Edit.
  3. Modify the following details for the task:
    1. Assigned group and Assignee
    2. Description
    3. Task Summary
    4. Priority
    5. Label
    6. Categories
    7. Target date
    8. Action taken
  4. Click Save.

To relate assets to a task

  1. In a security case, open a task from the Runbook, and click Edit.
  2. On the task details page, click Edit.
  3. On the Related assets tab, click + Assets.
  4. In the Search assets pane, provide the following search qualifications:
    • Select the CI type from the list.
    • Select the Product category tier 1 from the list.
    • (Optional) To search a specific product, select a value from the Product category tier 2, Product category tier 3, Product name, and Manufacturer name drop-down list.
    • (Optional) To search for assets based on location, select a value from the Region, Site group, and Site drop-down list.
    • Select the Status of assets from the drop-down list. The default option is Deployed.
  5. Click Search.
    A list of assets based on your search parameters is displayed.
  6. In the Search assets section, select the assets that you want to associate with the case.
  7. Click Relate.
    The assets associated with the case are displayed on the Related Assets tab of the case.
  8. (Optional) To view the details of an asset, click the asset name on the Related Assets tab.
  9. (Optional) To remove a related asset from the case, select the asset that you want to remove and click Delete. 

Where to go from here

Viewing-the-stages-of-tasks-and-assigning-stages-to-ad-hoc-tasks

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*