XDR tasks are created as a response to Incidents by selecting the affected identities and setting up the response actions for them.
1.Go to Incidents.
2.Select the incident or click the three dots button next to the incident and click View Details.
3.Select Affected Identities and click the Respond to Incident button.
4.Select Identities and click Continue.
5.Select a task for a user to respond to the identities affected by the incident.
You can see the progress indicator bar, status icon and details for each created task in Tasks.
Task Types
1.Go to Incidents.
2.Select the incident or click the three dots  button next to the incident, and click View Details.
3.Select Affected Identities and click the Respond to Incident button.
4.Select Identities and click Continue.
5.Select the task for a user—Disable User.
6.Click Confirm. |
1.Go to Incidents.
2.Select the incident, or click the three dots button next to the incident, and click View Details.
3.Select Affected Identities and click the three dots button next to the identity.
4.Select Enable User. |
1.Go to Incidents.
2.Select the incident or click the three dots button next to the incident, and click View Details.
3.Select Affected Identities and click the Respond to Incident button.
4.Select Identities and click Continue.
5.Select the task for a user—Reset User Passwords. You can only reset the password for one user at a time.
6.Click Confirm.
7.Write New Password or click Generate. Write a new password again to the Confirm Password field.
8.Click Confirm.
The administrator must send the new password to the user. Password resets automatically, the user just types the new password.
|
1.Go to Incidents.
2.Select the incident or click the three dots button next to the incident, and click View Details.
3.Select Affected Identities and click the Respond to Incident button.
4.Select Identities and click Continue.
5.Select the task for a user—Revoke Sessions.
6.Click Confirm. |
1.Go to Incidents.
2.Select the incident or click the three dots button next to the incident, and click View Details.
3.Select Affected Identities and click the Respond to Incident button.
4.Select Identities and click Continue.
5.Select the task for a user—Disable Associated Devices.
6.Click Confirm. |
1.Go to Incidents.
2.Select the incident or click the three dots button next to the incident, and click View Details.
3.Select Affected Identities and click the Respond to Incident button.
4.Select Identities and click Continue.
5.Select the task for a user—Enable Associated Devices.
6.Click Confirm. |
Select any row and click the three dots button to View Details of the selected task. The Overview section provides the following information: Name, Description, Task Type, Integration type, Incident—click to redirect to the incident and Progress—progress bar showing how many computers the task has finished and failed. The Targets section provides the information about the targeted computers with the actual status.
