Hi folks. I'd like to know if there's a way to use a template for scheduled tasks in Attack Discovery. The information I've received is that Attack Discovery automatically fills in the fields, but is there any way to edit them?
Hi
At the moment, Attack Discovery can use a case template to populate the default fields when creating cases, but those fields themselves cannot be edited directly within the scheduled task configuration.
If you need different values, the usual approach is to modify or create another case template with the desired settings and then select it in the schedule. The template acts as the source of the field values rather than something that can be customized inline.
Hi Wagner, thanks for the question. I'm a PM on the AI Security team, specifically managing our Attack Discovery feature, and I'd like to understand your use case better so we can prioritize this properly.
A few questions:
- Which case fields would you like to control via a template? (e.g., tags, severity, assignee, connector to Jira/ServiceNow, custom fields)
- What's the downstream workflow — are these cases routed to a team or synced to an external ticketing system?
This will help me scope the right issue for our team to look into.
Hi David. Today we used a Case template which has a connector for our ticketing system where we use the following fields:
Fields for Creating the Case in ITSM
{{{case.title}}}
{{{case.description}}}
{{{case.severity}}}
{{{case.tags}}}
The connector we use is the Webhook Case Management.
What I found strange is that when selecting the Case option in the Attack Discovery scheduling, I can't select a Case Template that I already have. If I could insert an already created Case Template, I could make the necessary modifications for sending it to my ticketing system, however, what I observed is that Attack Discovery itself inserts the fields.
How would I use a Case Template that has already been created?
Thank you in advance for your attention.