Chronicle SOAR allows building processes for cases and measuring the time it takes to complete them as well as the stages of each process. Security analysts can take a case through the stages by following a playbook or manually. Automation can also follow a predefined process.
Let’s use the dashboards to measure the stages each case is going through. To do that, we can either create a new table widget that shows cases avg. handling time or use the built in ROI widgets.

  1. Navigate to the Dashboard screen. Click the + icon on the top right of the screen. 
  2. Enter a title for the widget, choose a desired widget width, and select information from the drop-down lists, and then click Create.
  3. Now look at the Dashboard and you will see this widget displays that the average handling time is 15 minutes.