Important Notions Before Starting

This Product is a platform made for Security Operations Center (SOC) on a National Scale. Users are mostly analysts who overview the country's main organizations' digital assets and make sure there is no cyber threats around. If they identify a certain incident that actually threat one organization's assets, they open a ticket to gather all the information about it and collaborate with other users. Each Ticket includes a set of task to achieve in order to solve the incident, while each tasks are set individually to each ticket.

Understanding Problem Domain

When an analyst identifies a potential incident, they need to quickly create a ticket by adding the relevant entities, people, and information. This process can take valuable time, sometimes at the expense ofanalyzing and resolving the incident itself.We noticed Analysts were complaining about loosing precious time reproducing repetitive flows, such as writing manually the same tasks for similar tickets.

➡️Main goal: Ensure efficient incident response