Allow Notes on Attachments
I would like to have, if possible, the chance to create notes in attachments the same way I can create a note in a Task or Artifact.
This way, if I am doing an analysis of a file I can be adding the information in a note and if in a future I need to create a report from that attachment, I only need to look for the notes of that specific attachment.
Another improvement could be adding the information you get from the artifacts regarding an attachment into that attachment notes.
The main reason is to have, as I said, all information regarding an attachment together in one place.
Those notes could also appear in the notes tab as task notes do, something like:
User ABC added a note to the attachment XYZ
-
Guest
- Mar 31 2018
- Future consideration
Related ideas
Discussion would best, but if it helps to get this sooner, a description field would go a long way already
Attachments Open full size
Hi J,
I'm afraid to report there are no near term plans for this idea.
Question, would adding a single description field be of use, or is the real value in the notes like discussion ?
Cheers,
Martin
Attachments Open full size
This is years old and has quite a few upvotes. Still not planned for future release?
Is this this a good idea? Or not? How is one supposed to work on more complex incidents without this feature and keep the overview?
I would whish for some feedback from the product team.
Attachments Open full size
Badly needed!
Attachments Open full size
Yes! Overall the attachment and artefacts section needs improvement.
How about:
- Description field (what is this attachment about)
- Comments section (similar to notes)
- Automatic hash calculation of each file
- Three checkboxes: "analysis complete" (yes/no), "malicious" (yes/no), "deprecated" (yes/no)
- Optional actions provided by Resilient based on filetype: CSV - parse and create artefacts (including a wizard in the gui), picture (add to notes, asking for description), hash (lookup at virus total)
Attachments Open full size
This would be my second choice.
Attachments Open full size
Definitely see a lot of value in this. Provides context to our attachment uploads.
Attachments Open full size
The basic need for us is to be able to give a short description of the Attachment. Now you can just drop it on a task/incident, no comment possible. The next is to be able to add a note on the attachment, when you are working on it, doing analysis. Might be that both requirements can be combined.
Attachments Open full size
We created ticket 6147 in July 2017 to request something very similar.
Users have also asked for one or more flags on Attachments and Artifacts to define degree of danger, confidentiality and so on, with logic to control access to users selectively (confidentiality) and warn of dangerous content as appropriate.
Attachments Open full size
Yea, notes would be great. Or have tasks and artifacts linked and display linked artifacts in the task and the task notes in the linked artifacts.
Attachments Open full size