We’re happy to announce the release of Mission Control 3.0 which includes several new and exciting features made available to Splunk Enterprise Security Cloud users. The new features, detailed below, improve upon your user experience in Mission Control by helping you:
- Simplify incident aggregation by consolidating related incidents for easier investigations with full context
- Seamlessly create incidents manually and add summary fields with multiple values
- Quickly access visualizations to better identify risk with a risk event timeline
This release continues adding capabilities that unify security operations for Splunk users. We are bringing together your threat detection, investigation and response workflows into a common work surface. As a reminder, Mission Control is available for Splunk Cloud Enterprise Security Customers who are eligible for Mission Control today and it’s quick and simple to enable. Below are more details and screenshots of our latest release and you can find more details like release notes on our documentation site.
Simpler Incident Aggregation to Streamline Processes
By merging related incidents using a parent/child view, you can minimize duplicate efforts, ensure accurate prioritization, and seamlessly inherit key attributes for streamlined processing. This feature is being released in a Preview version only.
Seamlessly Create Incidents Manually and Add Summary Fields with Multiple Values
You now have the ability to add summary field information in the Mission Control UI. Many times you need to create incidents manually and set owner, status or other fields. Creating these incidents manually requires adding custom fields like “username”, which is now enabled in the UI with a new + button to add summary fields.
Quickly Access Visualizations To Better Identify Risk With A Risk Event Timeline
Visualizations related to Risk Notables, like the interactive Risk Event Timeline, as well as the MITRE ATT&CK Matrix visualization, are quickly accessible within incidents in Mission Control.
For more information on Mission Control such as a product tour, demo videos, blog posts, white papers, and webinars, please visit our home page for Splunk Mission Control.
