Comments — Notes and Mentions on Incidents // MODULES

Comments — Notes and Mentions on Incidents

Contextual comment threads on any entity in the platform: incidents, IOCs, reports and monitors.

Overview

@ mentions notify analysts; the immutable history preserves the discussion as part of the investigation record.

Capabilities

  • Threads on any object
  • @user and @team mentions
  • Reactions and bookmarks
  • Markdown support
  • Immutable history

Use Cases

  • Collaboration between analysts on an investigation
  • Notes on IOCs
  • Discussing reports
  • Knowledge transfer

Integrations

  • Optional Slack mirror
  • E-mail digests

SLA & Guarantees

Streaming over WebSockets

Next Steps