Feature request: add Comment capability on Incidents | Voters

Feature request: add Comment capability on Incidents

planned

Aaron Williams

Please add the ability to add comments to the incidents, as that would improve communication between our team, so they don't have to login to the ticket system and find the ticket to see what the update is.

April 12, 2024

Bjørn Mathisen

Great to see this being planned. Could it be possible to make these comments available through API / PSA?

Nisarg Desai

marked this post as

planned

Nisarg Desai

marked this post as

under review

Stevez Gomes

+1 Adding support for this, it will be useful to add point in time notes to record important details even after the incident is resolved.

Patrick Sofo [Security Product Manager]

Merged in a post:

ability to add comments to incident report

Chris Nay

sometimes the inicdents are not straight forwared. it would be nice to be able to add comments to tehem

September 5, 2024

Patrick Sofo [Security Product Manager]

Merged in a post:

Investigation Notes

Gary Gagnon

I want to add notes to an investigation. I didn't see a way to do it but I will be doing my own investigation and I want to track that history in the investigation itself.

August 29, 2024

Jordy Minnebo

I'd like to even extend this to have communication with the SOC. Now you have to create a seperate ticket if you have questions about an incident. Splitting all info into two systems (Huntress Dashboard and Outlook).

it would be cool to see interaction with the SoC from the Huntress Dashboard, so all info is linked to the Incident. You have an API connection, so you can easily push internal notes into the existing PSA tickets too.

Patrick Sofo [Security Product Manager]

Merged in a post:

Comments field for incidents

Kerry'la Mills'la

It would be nice to have a comments or notes field for each incident. Having multiple people who receive and respond to incidents, if we could add comments to that incident it would help keep everyone in the loop on additional items that might have been or need to be done for that incident. Cut down on double-work.

June 24, 2024

Matthew Buehlmann

+1 to this, especially if we could have a 2-way sync with PSA!

Patrick Sofo [Security Product Manager]

Gary Gagnon Can you share a little bit more on where you'd want to be able to store these notes?

On the Incident Report?
On the individual signals investigated?
The specific endpoint or identity pages?

Thanks!

Gary Gagnon

On the incident report itself. Whether it's a separate sort of Notes tab or with the Report section.

→