New Features

Playbook Parallel Actions

Chronicle SOAR is excited to introduce the new feature Parallel Actions in Playbooks.

From now on you can group together actions that can run in parallel during the Playbook execution. This speeds up the Playbook run allowing you to gather information faster and cut down significantly on the time you need to investigate a case.

In addition, it allows you to organize the playbook for better readability by grouping contextual actions in parallel.

For full details on how to use parallel actions in Playbooks, click here.

Case Wall Redesign

The Case wall has been redesigned to increase ease of use and accessibility. The following changes have been made:

  • Case wall tab has been moved in order to create easier access.
  • Case wall has been redesigned to allow for more information to be interpreted at a glance.

Increased File Size for Case Wall Attachments

The Case wall attachment file size increased from 15MB to 50MB.

Edit and Delete Case Comments 

There is now an option for users to edit and delete their own comments on the Case wall. All comments that are edited or deleted can be found in the Audit screen.

SLA Enhancements

SLA Icons

Icons indicating the type of SLA (Case SLA / Alert SLA) and the SLA status are now displayed on the Cases Screen. The color of the SLA indicates its status:

Active Case SLA
Active Alert SLA
Case SLA Critical Period
Alert SLA Critical Period
Case SLA Breached   
Alert SLA Breached
    


Set SLA by Case Priority 

An SLA definition can now be configured by Case Priority directly from the Settings > Environments > SLA screen.

SLA Icons added to Homepage 

  • Alert SLA and Case SLA icons have been added to the Homepage. 

 

  • The side drawer displays the SLA information as well.

 

Alert SLAs in Cases screen

For cases with multiple alerts, the Alerts icon in "My Cases" will display all of the Alert SLAs in one popover. Each Alert SLA can be clicked on to view the individual alert.

New "Set Case SLA" Playbook action

This Playbook action enables the user to dynamically set the Case SLA. The action is available in Siemplify integration number 19.7.

For more information on SLA please refer to Setting the SLA

Command Center renamed to Incident Manager

Our Command Center is being renamed to Incident Manager to align better with our goals. Functionality remains the same.

New Notifications support

Chronicle SOAR now supports sending notifications to the case assignee for the following changes:

  • Priority 
  • Mark as important

Bug Fixes

  • After deleting a custom integration via the IDE, the integration still appears in the Marketplace.
  • Alert Reduction Percentage widget logic improved ( ID #00164485)