Kaspersky Next XDR Expert
Contents
Contents
Predefined incident workflows
Kaspersky Next XDR Expert allows you to manage incidents by using the predefined incident workflow. In the incident workflows table, such workflow is named Standard. In the Creation type column, these workflows are marked as Predefined.
If necessary, you can edit the predefined workflow to customize it.
The table below shows the statuses of the predefined workflow, and the reasons why incidents switch to these statuses.
Status |
Reasons |
Initial |
|
In progress |
The user manually changed the incident status from Initial or On hold to In progress. |
On hold |
The user manually changed the incident status from In progress to On hold. |
Done |
|