The Secureworks Counter Threat Platform ticket ingestion integration enables you to automatically fetch Secureworks CTP tickets, convert them into security incidents and perform automated response actions.

The key features of this integration include:

  • Automatic ingestion of selected tickets (including attachments) based on a pre-defined schedule.
  • Mapping of ticket and event fields to Security Incident Response fields.
  • Preview of security incidents mapped to the ticket fields.
  • Filtering and aggregation of tickets.
  • On demand retrieval of events associated with a ticket.
  • Periodic tracking of key updates to tickets.
  • Automating ticket updates and closures based on SIR incident status
  • Master ticket update.
  • Synchronization of Secureworks worklogs with Security Incident Response worknotes.